# ============================================================
# Signing Service - Environment Variables
# Copy this file to `.env` and fill the real values
# ============================================================

# --------------------
# UVICORN
# --------------------
UVICORN_RELOAD=false
UVICORN_WORKERS=2

# --------------------
# Application
# --------------------
APP_ENV=local              # local | prod
LOG_LEVEL=INFO
STATE_PATH = ./
LOCAL_TZ = Europe/Madrid

# --------------------
# Secret manager
# --------------------
SECRET_PROVIDER=infisical  # fake | google | infisical

# Infisical
INFISICAL_HOST=https://eu.infisical.com
INFISICAL_CLIENT_ID=replace-with-infisical-client-id
INFISICAL_CLIENT_SECRET=replace-with-infisical-client-secret
INFISICAL_PROJECT_ID=replace-with-infisical-project-id
INFISICAL_ENV_SLUG=dev
# Reserved for backwards compatibility; it is not used by the current SDK adapter.
INFISICAL_TOKEN_AUTH=replace-with-token-if-your-deployment-requires-it

# Google
GCP_PROJECT_ID=

# --------------------
# PDF signing
# --------------------
CERT_SECRET_NAME=certificate_secret_name
CERT_PASSWORD_SECRET_NAME=certificate_password_secret_name
# Technical client authentication for POST /documents/sign. Send it as:
# Authorization: Bearer <SERVICE_API_KEY>
SERVICE_API_KEY=replace-with-a-long-random-service-api-key
# Maximum accepted upload size. The service reads at most this value plus one byte.
PDF_MAX_SIZE_BYTES=10485760