.env.docker.example

# =========================================================
# 🌐 Backend: API Configuration
# =========================================================

# Application environment (development | production | test)
NODE_ENV=development

# API server port
PORT=8080

# Maximum number of in-memory entries (leave empty for default)
MAX_MEMORY_ENTRIES=

# Allowed CORS origins (comma-separated)
ALLOWED_ORIGINS=http://localhost:3000,http://localhost:8080


# =========================================================
# 🪵 Logging
# =========================================================

# Log level (debug | info | warn | error)
LOG_LEVEL=info


# =========================================================
# 🎨 Frontend Configuration
# =========================================================
SITE_URL=

# Public API URL (accessible from browser)
NEXT_PUBLIC_BACKEND_URL=http://localhost:8080/api/v1

# Internal API URL (used in Docker/network)
BACKEND_INTERNAL_URL=http://api:8080/api/v1

# Marketing site. NEXT_PUBLIC_* are build-time: run `docker compose build web` after changing them.
NEXT_PUBLIC_SITE_URL=https://veriworkly.com
# Growth programs on the site; keep equal to the API's flags (off when empty in production).
AFFILIATE_PROGRAM_ENABLED=
AMBASSADOR_PROGRAM_ENABLED=
# Optional receivers for plain JSON (leave empty to send nothing).
ERROR_REPORT_URL=
NEXT_PUBLIC_VITALS_URL=

# Admin email (used for admin panel)
ADMIN_EMAIL=

# Sign-in providers (leave empty to turn one off)
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
LINKEDIN_CLIENT_ID=
LINKEDIN_CLIENT_SECRET=

# Signs the site revalidation call for the changelog and roadmap pages
SITE_REVALIDATE_SECRET=

# Every other server setting (rate limits, retention windows, CRON_ROLE, ...) can be set here
# too; see apps/server/.env.example. Compose passes each one to the API when it is set.


# =========================================================
# 🗄 Backend: Database & Cache
# =========================================================

# Primary database connection string
DATABASE_URL=

# Redis connection
REDIS_URL=
REDIS_HOST=
REDIS_PORT=

# =========================================================
# 🔐 Security & Secrets
# =========================================================

# Secret used for authentication/session encryption
AUTH_SECRET=

# Base URL for auth callbacks
AUTH_BASE_URL=http://localhost:8080


# =========================================================
# 🔑 Authentication Sessions
# =========================================================

# Session lifetime in seconds
AUTH_SESSION_TTL_SECONDS=

# Reset session TTL on activity (true | false)
AUTH_SESSION_RESET_TTL_ON_USE=true

# Server session cache and revocation tombstone lifetime (seconds)
AUTH_SESSION_CACHE_MAX_AGE_SECONDS=

# OTP expiration time (seconds)
AUTH_OTP_TTL_SECONDS=

# Max OTP attempts
AUTH_OTP_ALLOWED_ATTEMPTS=3


# =========================================================
# 📧 Email Configuration
# =========================================================

# Email provider: "resend" (recommended) or "smtp" in production; "console" in development
AUTH_EMAIL_PROVIDER=

# Sender email address
AUTH_EMAIL_FROM=

# Option 1: Resend API (when AUTH_EMAIL_PROVIDER=resend)
RESEND_API_KEY=

# =========================================================
# 📬 SMTP Configuration (when AUTH_EMAIL_PROVIDER=smtp)
# =========================================================

# For Resend SMTP: host=smtp.resend.com, port=465 (secure=true) or 587 (secure=false), user=resend, pass=<RESEND_API_KEY>
AUTH_SMTP_HOST=
AUTH_SMTP_PORT=
AUTH_SMTP_SECURE= # true | false
AUTH_SMTP_USER=
AUTH_SMTP_PASS=


# =========================================================
# 🚦 Rate Limiting
# =========================================================

# Time window in ms
RATE_LIMIT_WINDOW_MS=

# Max requests per window
RATE_LIMIT_MAX_REQUESTS=

# =========================================================
# AI Provider and Private Policy
# =========================================================

AI_API_KEY=
AI_BASE_URL=
# Private policies: set each _PATH to a mounted file, or put the JSON in the matching _JSON.
# e.g. ./.private/ai-actions-policy.json
AI_ACTIONS_POLICY_PATH=
AI_ACTIONS_POLICY_JSON=
# e.g. ./.private/ats-ai-policy.json
ATS_AI_POLICY_PATH=
ATS_AI_POLICY_JSON=
# e.g. ./.private/ats-engine-policy.json (built for the engine version the server runs)
ATS_ENGINE_POLICY_PATH=
ATS_ENGINE_POLICY_JSON=
AI_STANDARD_MODEL=
AI_EXPERT_MODEL=

# =========================================================
# Dodo Payments
# =========================================================

DODO_PAYMENTS_API_KEY=
DODO_PAYMENTS_WEBHOOK_SECRET=
DODO_PAYMENTS_ENVIRONMENT=test_mode
DODO_PAYMENTS_PORTFOLIO_PRO_MONTHLY_PRODUCT_ID=
DODO_PAYMENTS_PORTFOLIO_PRO_ANNUAL_PRODUCT_ID=
DODO_PAYMENTS_BUNDLE_ONE_DAY_PRODUCT_ID=
DODO_PAYMENTS_BUNDLE_SEVEN_DAY_PRODUCT_ID=
DODO_PAYMENTS_AI_CREDITS_MONTHLY_PRODUCT_ID=
DODO_PAYMENTS_AI_CREDITS_ANNUAL_PRODUCT_ID=
DODO_PAYMENTS_BUNDLE_MONTHLY_PRODUCT_ID=
DODO_PAYMENTS_BUNDLE_ANNUAL_PRODUCT_ID=
DODO_PAYMENTS_CREDIT_PACK_250_PRODUCT_ID=
DODO_PAYMENTS_CREDIT_PACK_500_PRODUCT_ID=
DODO_PAYMENTS_CREDIT_PACK_1200_PRODUCT_ID=


# =========================================================
# ⚡ Cache TTLs (in seconds)
# =========================================================

ROADMAP_CACHE_TTL_SECONDS=
ROADMAP_STATS_CACHE_TTL_SECONDS=
GITHUB_STATS_CACHE_TTL_SECONDS=


# =========================================================
# 🐙 GitHub Sync (Optional)
# =========================================================

# Enable GitHub sync
GITHUB_SYNC_ENABLED=false

# GitHub personal access token
GITHUB_TOKEN=

# Repository details
GITHUB_OWNER=
GITHUB_REPO=
GITHUB_PROJECT_URL=

# Cron schedule (default: twice daily)
GITHUB_SYNC_CRON=0 0,12 * * *

# Timezone for cron jobs
GITHUB_SYNC_TIMEZONE=

# Internal API key for sync jobs
INTERNAL_SYNC_API_KEY=

# Enable syncing missing GitHub Releases into the changelog
CHANGELOG_RELEASE_SYNC_ENABLED=false

# Cron schedule (default: once daily)
CHANGELOG_RELEASE_SYNC_CRON=0 6 * * *

# Timezone for the changelog release sync cron job
CHANGELOG_RELEASE_SYNC_TIMEZONE=

# Minimum gap between two *startup* syncs (seconds, default 6h). A restart is not a reason to
# re-scan GitHub; the cron above is unaffected.
CHANGELOG_RELEASE_SYNC_MIN_INTERVAL_SECONDS=21600


# =========================================================
# 📊 Usage Metrics
# =========================================================

# Cron for flushing metrics
USAGE_METRICS_FLUSH_CRON=10 0 * * *

# Timezone for metrics job
USAGE_METRICS_FLUSH_TIMEZONE=