# ============================================================
# ShieldX Configuration
# ============================================================

# Database (PostgreSQL 17 + pgvector)
DATABASE_URL=postgresql://shieldx:shieldx_dev_password@localhost:5432/shieldx
DATABASE_POOL_SIZE=10

# Ollama (local LLM — for embeddings + guard model)
OLLAMA_ENDPOINT=http://localhost:11434
OLLAMA_EMBEDDING_MODEL=nomic-embed-text
OLLAMA_GUARD_MODEL=llama3.2

# Anthropic (optional — for API-based detection)
ANTHROPIC_API_KEY=

# Logging
SHIELDX_LOG_LEVEL=info

# Community / Federated Sync (opt-in, default OFF)
SHIELDX_COMMUNITY_SYNC=false
SHIELDX_COMMUNITY_SYNC_URL=

# Canary Tokens
SHIELDX_CANARY_SECRET=change-this-to-a-random-32-char-string

# Webhooks (optional — for incident notifications)
SHIELDX_WEBHOOK_URL=
SHIELDX_WEBHOOK_SECRET=

# Feature Flags
SHIELDX_ENABLE_PPA=true
SHIELDX_ENABLE_BEHAVIORAL=true
SHIELDX_ENABLE_MCP_GUARD=true
SHIELDX_ENABLE_SELF_CONSCIOUSNESS=false
SHIELDX_PPA_LEVEL=medium