.env.example

# Flask application settings
FLASK_SECRET_KEY=change-me
SESSION_COOKIE_NAME=forklift_session
SESSION_COOKIE_SECURE=false
SESSION_COOKIE_SAMESITE=Lax

# Database connection (persisted in ./data when using Docker)
DATABASE_URL=sqlite:////app/data/forklift.db

# Public URL and CAS authentication
PUBLIC_BASE_URL=https://verify.example.asu.edu
CAS_BASE_URL=https://cas.example.edu/cas
CAS_LOGIN_URL=
CAS_VALIDATE_URL=
CAS_LOGOUT_URL=
CAS_SERVICE_URL=https://verify.example.asu.edu/auth/cas/callback
CAS_ENABLED=true

# CAS attribute mapping (falls back to SAML_ATTR_* for compatibility)
CAS_ATTR_ASURITE=uid,asuEduID,asuEduPersonID
CAS_ATTR_EMAIL=mail,email
CAS_ATTR_FULL_NAME=displayName
CAS_ATTR_FIRST_NAME=givenName
CAS_ATTR_LAST_NAME=sn
CAS_ATTR_AFFILIATIONS=eduPersonAffiliation

# Discord OAuth and bot configuration
DISCORD_CLIENT_ID=your-client-id
DISCORD_CLIENT_SECRET=your-client-secret
DISCORD_REDIRECT_URI=https://verify.example.asu.edu/auth/discord/callback
DISCORD_BOT_TOKEN=your-bot-token
DISCORD_GUILD_ID=your-guild-id
DISCORD_VERIFIED_ROLE_ID=your-verified-role-id
DISCORD_UNVERIFIED_ROLE_ID=your-unverified-role-id
DISCORD_SCOPE="identify guilds.join"
DISCORD_SUCCESS_REDIRECT=/verified
DISCORD_FAILURE_REDIRECT=/verification-error
QNA_FORUM_CHANNEL_ID=your-forum-channel-id
QNA_KNOWLEDGE_BASE_ID=your-knowledge-base-id
QNA_MODEL_ARN=us.anthropic.claude-haiku-4-5-20251001-v1:0
QNA_AWS_REGION=us-west-2
QNA_HELPER_ROLE_ID=your-helper-role-id

# Salesforce ESB API credentials
SALESFORCE_API_CLIENT_ID=your-salesforce-client-id
SALESFORCE_API_CLIENT_SECRET=your-salesforce-client-secret

# SFTP uploads (set SFTP_UPLOAD_ENABLED=true to enable the daily exporter)
SFTP_UPLOAD_ENABLED=false
SFTP_HOST=sftp.example.com
SFTP_PORT=22
SFTP_USERNAME=forklift
# Provide either SFTP_PASSWORD or SFTP_KEY_FILE
SFTP_PASSWORD=
SFTP_KEY_FILE=
SFTP_REMOTE_DIR=/incoming/forklift
SFTP_FILENAME_PREFIX=emails
SFTP_STATE_PATH=/app/data/upload_emails_to_sftp.state
SFTP_TIMEOUT=30

# Google Sheets (set GOOGLE_SHEETS_ENABLED=true to log verified user departures)
GOOGLE_SHEETS_ENABLED=false
GOOGLE_SHEETS_CREDENTIALS_FILE=/app/credentials/google-service-account.json
GOOGLE_SHEETS_SPREADSHEET_ID=your-spreadsheet-id
GOOGLE_SHEETS_WORKSHEET_NAME=Sheet1