# Public origin only: scheme + host, no path/query/fragment.
BASE_URL=https://ai.trustednet.eu
PUBLIC_NAME=AI Usage Disclosure
CONTACT_URL=https://ai.trustednet.eu
SALES_URL=https://ai.trustednet.eu/product
DEFAULT_LANGUAGE=de

# Proxy and logging. Enable proxy headers only with explicit trusted CIDRs.
TRUST_PROXY=true
TRUSTED_PROXY_CIDRS=
LOG_CLIENT_IP=false
ENABLE_HSTS=true

# Prometheus is disabled by default. Enabling it requires a long bearer token;
# METRICS_TOKEN_FILE is also supported. Keep the endpoint on an internal network.
METRICS_ENABLED=false
METRICS_TOKEN=

# ---------------------------------------------------------------------------
# Legal operator data. Fill with accurate information before public operation.
# LEGAL_STRICT=true prevents startup while core legal/privacy fields are empty
# or contain REPLACE_ME/CHANGEME/TODO.
# ---------------------------------------------------------------------------
LEGAL_STRICT=true
LEGAL_NAME=REPLACE_ME
LEGAL_ADDRESS=REPLACE_ME
LEGAL_REPRESENTATIVE=
LEGAL_EMAIL=REPLACE_ME
LEGAL_PHONE=
LEGAL_REGISTER=
LEGAL_REGISTER_NUMBER=
LEGAL_VAT_ID=

# Only set these if the service contains journalistic-editorial content and
# § 18(2) MStV applies.
EDITORIAL_RESPONSIBLE_NAME=
EDITORIAL_RESPONSIBLE_ADDRESS=

DATA_PROTECTION_CONTACT=
HOSTING_PROVIDER=REPLACE_ME
HOSTING_ADDRESS=
LOG_RETENTION=REPLACE_ME
DATA_RECIPIENTS=
THIRD_COUNTRY_TRANSFERS=
SUPERVISORY_AUTHORITY_NAME=
SUPERVISORY_AUTHORITY_URL=

# One of: not_applicable, not_participating, participating.
# Assess applicability under the VSBG; do not copy a status blindly.
CONSUMER_DISPUTE_STATUS=REPLACE_ME
CONSUMER_DISPUTE_BODY=
CONSUMER_DISPUTE_URL=

ACCESSIBILITY_CONTACT=
ACCESSIBILITY_STATUS=

# Runtime license issued by the standalone Universal License Platform.
# No private keys or configurable public keys belong in this application.
LICENSE_TOKEN=
LICENSE_INSTANCE_ID=
LICENSE_MODE=offline
LICENSE_SERVER_URL=https://license.trustednet.eu
LICENSE_CACHE_FILE=/data/license-lease.json
LICENSE_REFRESH_INTERVAL=15m
LICENSE_REQUEST_TIMEOUT=5s