.env.example

# Root environment for Docker Compose.
# Copy to `.env` in the repository root before running `docker compose up --build`.
# Do not commit `.env`.

# --- App environment ---
# Use `local` for Compose on your machine. Use `staging` or `production` for Coolify / live hosts.
ENV=local

# --- Host ports ---
FRONTEND_PORT=8080
BACKEND_PORT=8000
DB_PORT=5432

# --- Frontend (baked into the image at build time) ---
# NEXT_PUBLIC_CORE_API_URL must be reachable from the browser.
# Use http://localhost:8000/v3 for local Compose. Do not use the Docker service name `backend`.
NEXT_PUBLIC_ENV=local
NEXT_PUBLIC_CORE_API_URL=http://localhost:8000/v3

# --- Backend secrets ---
# Generate an RSA key pair, then paste PEM with literal \n for newlines, for example:
#   openssl genrsa -out private.pem 2048
#   openssl rsa -in private.pem -pubout -out public.pem
#   awk 'NF {sub(/\r/, ""); printf "%s\\n",$0;}' public.pem
#   awk 'NF {sub(/\r/, ""); printf "%s\\n",$0;}' private.pem
JWT_PUBLIC_KEY=
JWT_PRIVATE_KEY=
OTP_SECRET_KEY=
# Frontend URL used for email links and CORS in live environments
PORTAL_URL=http://localhost:8080

# --- Database (Compose `db` service) ---
DB_HOST=db
DB_USERNAME=postgres
DB_PASSWORD=postgres
DB_DIALECT=postgresql
DB_NAME=postgres
# Local Compose may use trust. For Coolify / staging / production, set a strong password
# and prefer POSTGRES_HOST_AUTH_METHOD=scram-sha-256 (or leave unset once password auth is required).
POSTGRES_HOST_AUTH_METHOD=trust

# --- Optional: first-user bootstrap (after migrations) ---
# docker compose exec backend python create_initial_user.py
INITIAL_USER_EMAIL=
INITIAL_USER_PASSWORD=