.env.example

# Application Runtime
NEXT_PUBLIC_APP_URL=http://localhost:3000
POCKETBASE_INTERNAL_URL=http://127.0.0.1:8090
POCKETBASE_SERVICE_EMAIL=backend@deetnuts.invalid
POCKETBASE_SERVICE_PASSWORD=replace-with-32-to-72-random-characters
AUTH_STATE_SECRET=replace-with-at-least-32-random-characters
DEPLOYMENT_SHA=local-development
EJAM_DATA_ROOT=ejam/data

# Production image build metadata. CI sets both values to the full Git SHA.
NEXT_PUBLIC_SOURCE_COMMIT=
NEXT_DEPLOYMENT_ID=
# Build-only secret: base64-encoded 32-byte key. Do not expose it to clients.
NEXT_SERVER_ACTIONS_ENCRYPTION_KEY=

# Admissions detail rollout kill switch. Set this to false to route college
# details back to the directory and disable the public fit endpoint.
ADMISSIONS_V2_MHT_CET=false

# One-time migration source and private target. These values are never passed
# to the application containers and can be removed after the rollback window.
DIRECT_URL_SUPABASE=postgresql://readonly-source
NEXT_PUBLIC_SUPABASE_URL=https://your-source-project.supabase.co
SUPABASE_SERVICE_ROLE_KEY=source-service-role-key
POCKETBASE_MIGRATION_URL=http://127.0.0.1:8090
POCKETBASE_SUPERUSER_EMAIL=admin@deetnuts.invalid
POCKETBASE_SUPERUSER_PASSWORD=replace-with-32-to-72-random-characters
DEETNUTS_MIGRATION_KEY=replace-with-at-least-32-random-characters
GOOGLE_OAUTH_CLIENT_ID=replace-with-google-oauth-client-id
GOOGLE_OAUTH_CLIENT_SECRET=replace-with-google-oauth-client-secret

# Optional
# SKIP_ENV_VALIDATION=true
NODE_ENV=development

# Bot API / Discord Interactions
BOT_API_TOKEN=replace-with-a-long-random-token
DISCORD_APPLICATION_ID=
DISCORD_BOT_TOKEN=
DISCORD_PUBLIC_KEY=
# Optional: register commands to one guild for fast testing
DISCORD_GUILD_ID=
# Optional: comma-separated allowed Discord guild IDs for runtime checks
DISCORD_ALLOWED_GUILD_IDS=

# Reddit Worker (disabled by default in the production Compose profile)
BOT_API_BASE_URL=https://www.deetnuts.com
REDDIT_USER_AGENT=deetnuts-cutoff-bot/0.1 by your_reddit_username
REDDIT_CLIENT_ID=
REDDIT_CLIENT_SECRET=
REDDIT_REDIRECT_URI=http://localhost:8080/reddit/callback
REDDIT_REFRESH_TOKEN=
REDDIT_SUBREDDITS=mht_cet
# Defaults to dry-run unless explicitly set to false
REDDIT_DRY_RUN=true
REDDIT_POLL_INTERVAL_MS=60000
REDDIT_WORKER_HEALTH_FILE=/tmp/reddit-worker-healthy