# Mimic — environment variables
# Copy this file to `.env` and fill in real values before `make start`.
# `.env` is gitignored — never commit secrets.

# --- Required ---

# JWT signing secret. Generate with: openssl rand -hex 32
# The backend will refuse to start in production if this is unset.
MIMIC_JWT_SECRET=replace-me-with-a-strong-random-secret

# --- Optional (defaults shown) ---

# Path where SQLite stores the database, INSIDE the container.
# Must live under the /data volume mount to persist across `make restart`.
MIMIC_DB_PATH=/data/mimic.sqlite

# Port the Flask app listens on inside the container.
# To expose on a different host port, override PORT when calling make:
#   make start PORT=8080
MIMIC_PORT=5000

# --- Sprint 2+ (not used in Sprint 1) ---
# MITRE_BUNDLE_PATH=/app/backend/data/mitre/enterprise-attack.json