.env.example

# Copy to .env and fill in values. All vars use the NICHART_ prefix.

# "local" or "cloud"
NICHART_EXECUTION_MODE=local

# Host-side path for user data. docker-compose mounts this at /data inside the
# container. DockerBackend uses this same path when mounting data into sibling
# containers so they can reach the same files (DooD pattern).
NICHART_HOST_DATA_PATH=/home/agetka/vs-code/projects/NiChart_Project_API/data

# Root directory for all user data as seen from inside the container.
# Leave as /data unless you're running outside Docker.
NICHART_DATA_ROOT=/data

# Staging area TTL in hours (DICOM and NIfTI uploads held before commit/discard)
NICHART_STAGING_TTL_HOURS=24

# Port exposed by docker-compose (default 8000)
NICHART_PORT=8000

# ── Cloud mode only (NICHART_EXECUTION_MODE=cloud) ───────────────────────────

# AWS Cognito
NICHART_COGNITO_REGION=us-east-1
NICHART_COGNITO_USER_POOL_ID=us-east-1_BSBhcKA66
NICHART_COGNITO_IDENTITY_POOL_ID=us-east-1:12c87a16-8336-450c-bf25-b98990c7dcf8
NICHART_COGNITO_CLIENT_ID=1ugglpalgp9r2gvb24s2v7dunq
NICHART_COGNITO_APP_SECRET= # Needed for confidential client

# FSx mount root — data paths must be /fsx/fsx/{user_sub}/... to match
# what the cbica-nichart-submitjob Lambda validates.
NICHART_DATA_ROOT=/fsx/fsx

# AWS Batch / Lambda
NICHART_BATCH_QUEUE_NAME=cbica-nichart-jobqueue-standard
NICHART_LAMBDA_FUNCTION_NAME=cbica-nichart-submitjob

# ── File ownership (local mode) ───────────────────────────────────────────────
# By default the API container and all tool containers run as root, causing
# output files to be root-owned on the host. Set these to your host user/group
# IDs to have all files written as yourself instead.
#
#   UID=$(id -u)
#   GID=$(id -g)
#   DOCKER_GID=$(getent group docker | cut -d: -f3)
#
# DOCKER_GID is the GID of /var/run/docker.sock on your host; needed so the
# non-root API container can still reach the Docker socket.
UID=1000
GID=1000
DOCKER_GID=999

# CORS allowed origins -- set this to whichever domain you'll access the API server from. 
# CORS is usually only enforced by browsers, so this might not be needed for some clients.
NICHART_CORS_ORIGINS=["http://localhost:3000","http://localhost:5173","http://localhost:5174", "https://cloud.neuroimagingchart.com/", "https://cloud-beta.neuroimagingchart.com/", "https://neuroimagingchart.com"]
# Alternatively, to allow all domains:
# NICHART_CORS_ORIGINS=["*"]
# Cert bundles (needed if API is on a work VPN or similar, common in my dev environment)
# Generally not needed in production
NICHART_CA_BUNDLE=