codac-25/.env.example at main · CodeAcademyBerlin/codac-25 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
# =============================================================================
# CODAC - Environment Configuration Template
# =============================================================================
# Copy this file to .env and fill in your actual values
# Never commit .env to version control - it contains sensitive information

# =============================================================================
# DATABASE CONFIGURATION
# =============================================================================

# PostgreSQL Database URL
# Format: postgresql://username:password@localhost:5432/database_name
DATABASE_URL="postgresql://username:password@localhost:5432/codac_dev"

# =============================================================================
# AUTHENTICATION & AUTHORIZATION (NextAuth.js)
# =============================================================================

# Authentication Secret (Required)
# Generate a secure random string (minimum 32 characters)
# You can use: openssl rand -base64 32
AUTH_SECRET="your-very-secure-secret-key-minimum-32-characters"

# Application URL
AUTH_URL="http://localhost:3000"
# Alternative format for compatibility
NEXTAUTH_URL="http://localhost:3000"

# =============================================================================
# OAUTH PROVIDERS
# =============================================================================

# Google OAuth (Required for Google sign-in)
# Get these from Google Cloud Console
AUTH_GOOGLE_ID="your-google-oauth-client-id"
AUTH_GOOGLE_SECRET="your-google-oauth-client-secret"

# =============================================================================
# EMAIL SERVICE (Resend)
# =============================================================================

# Resend API Key for transactional emails
# Get from: https://resend.com/
AUTH_RESEND_KEY="re_your-resend-api-key"
EMAIL_FROM="noreply@yourdomain.com"

# =============================================================================
# SUPABASE CONFIGURATION
# =============================================================================

# Supabase Project URL and API Key
# Get these from your Supabase project settings
NEXT_PUBLIC_SUPABASE_URL="https://your-project-id.supabase.co"
NEXT_PUBLIC_SUPABASE_PUBLISHABLE_OR_ANON_KEY="your-supabase-anon-key"

# =============================================================================
# AI SERVICES
# =============================================================================

# OpenAI API Key for AI features
# Get from: https://platform.openai.com/api-keys
OPENAI_API_KEY="sk-your-openai-api-key"

# Google Gemini API Key for AI features
# Get from: https://makersuite.google.com/app/apikey
GEMINI_API_KEY="your-gemini-api-key"

# =============================================================================
# APPLICATION CONFIGURATION
# =============================================================================

# Environment (automatically set by Node.js)
NODE_ENV="development"

# Application Host URL (public-facing)
NEXT_PUBLIC_APP_URL="http://localhost:3000"
NEXT_PUBLIC_HOST="localhost:3000"

# Server Port (optional, defaults to 3000)
PORT="3000"

# =============================================================================
# DEPLOYMENT (Vercel)
# =============================================================================

# Vercel URL (automatically set by Vercel)
# VERCEL_URL="your-app.vercel.app"

# =============================================================================
# DEVELOPMENT & TESTING
# =============================================================================

# CI Environment (set by CI/CD systems)
# CI="true"

# =============================================================================
# NOTES
# =============================================================================
#
# 1. Replace all placeholder values with your actual credentials
# 2. Never commit this file with real values to version control
# 3. For production, use your hosting platform's environment variable system
# 4. Some variables are optional and have defaults in the application
# 5. Public variables (NEXT_PUBLIC_*) are exposed to the browser
# 6. Keep your AUTH_SECRET secure and unique per environment
#