{% include 'roles/sys-svc-container/templates/env.j2' %}

PORT={{ FLOWISE_PORT_INTERNAL }}
FLOWISE_USERNAME={{ lookup('users', 'administrator').username }}
FLOWISE_PASSWORD={{ lookup('users', 'administrator').password | dotenv_quote }}
DATABASE_TYPE=postgres
DATABASE_HOST={{ lookup('database', application_id, 'host') }}
DATABASE_PORT={{ lookup('database', application_id, 'port') }}
DATABASE_NAME={{ lookup('database', application_id, 'name') }}
DATABASE_USER={{ lookup('database', application_id, 'username') }}
DATABASE_PASSWORD={{ lookup('database', application_id, 'password') | dotenv_quote }}
FLOWISE_FILE_STORAGE_PATH=/root/.flowise/storage
FLOWISE_SECRETKEY_OVERWRITE={{ lookup('config', application_id, 'secrets.credentials.secret_key') | dotenv_quote }}
JWT_AUTH_TOKEN_SECRET={{ lookup('config', application_id, 'secrets.credentials.jwt_auth_token_secret') | dotenv_quote }}
JWT_REFRESH_TOKEN_SECRET={{ lookup('config', application_id, 'secrets.credentials.jwt_refresh_token_secret') | dotenv_quote }}
EXPRESS_SESSION_SECRET={{ lookup('config', application_id, 'secrets.credentials.express_session_secret') | dotenv_quote }}
TOKEN_HASH_SECRET={{ lookup('config', application_id, 'secrets.credentials.token_hash_secret') | dotenv_quote }}

{% if lookup('engine', 'qdrant', application_id, 'enabled') %}
QDRANT_API_KEY={{ FLOWISE_QDRANT_API_KEY | dotenv_quote }}
QDRANT_URL={{ FLOWISE_QDRANT_INTERNAL_URL }}
{% endif %}
{% if FLOWISE_LITELLM_ENABLED | bool %}
OPENAI_API_BASE={{ FLOWISE_LITELLM_URL }}/v1
OPENAI_API_KEY={{ FLOWISE_LITELLM_API_KEY | dotenv_quote }}
{% endif %}

CUSTOM_MCP_PROTOCOL=sse
{# Exception: this Flowise has no allow list, only a deny list, so reaching an
   internal MCP host at all means turning the default check off. The deny list
   is then the only thing standing between a flow author and loopback, the
   link-local metadata endpoint and multicast. #}
{% if FLOWISE_MCP_ENABLED | bool %}
HTTP_SECURITY_CHECK=false
HTTP_DENY_LIST=0.0.0.0,127.0.0.0/8,169.254.0.0/16,224.0.0.0/4,240.0.0.0/4,255.255.255.255/32,::1,fd00:ec2::254,fe80::/10,ff00::/8,localhost,ip6-localhost
{% endif %}

{% set email = lookup('email', application_id) %}
{% if email.enabled | bool %}
SMTP_HOST={{ email.host }}
SMTP_PORT={{ email.port }}
SMTP_USER={{ email.username }}
SMTP_PASSWORD={{ email.password | dotenv_quote }}
SENDER_EMAIL={{ email['from'] }}
{% endif %}