env.example

# 🚀 LuxCore Environment Configuration
# 
# This file contains all environment variables needed for LuxCore with NovaSanctum integration.
# Copy this file to .env and update the values for your environment.
#
# @author LuxCore Team
# @version 1.0.0
# @since 2024-07-05

# =============================================================================
# 🌍 Application Configuration
# =============================================================================

# Application environment
NODE_ENV=development
PORT=3000
FRONTEND_PORT=3001

# Application URLs
FRONTEND_URL=http://localhost:3001
BACKEND_URL=http://localhost:3000
API_URL=http://localhost:3000/api

# =============================================================================
# 🗄️ Database Configuration
# =============================================================================

# PostgreSQL database connection
DATABASE_URL="postgresql://username:password@localhost:5432/luxcore?schema=public"

# Database connection pool
DATABASE_POOL_MIN=2
DATABASE_POOL_MAX=10

# =============================================================================
# 🛡️ NovaSanctum Security Configuration
# =============================================================================

# JWT configuration
NOVASANCTUM_SECRET=your-super-secret-nova-sanctum-key-change-in-production
JWT_SECRET=your-jwt-secret-key-change-in-production
JWT_EXPIRES_IN=24h
REFRESH_TOKEN_EXPIRES_IN=7d

# Password hashing
BCRYPT_ROUNDS=12

# Session configuration
SESSION_SECRET=your-session-secret-change-in-production
SESSION_TIMEOUT_MS=86400000

# Rate limiting
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX=100
AUTH_RATE_LIMIT_MAX=5

# Security settings
MAX_LOGIN_ATTEMPTS=5
LOCKOUT_DURATION_MS=900000

# =============================================================================
# 🔐 Authentication & Authorization
# =============================================================================

# CORS configuration
CORS_ORIGIN=http://localhost:3001
CORS_CREDENTIALS=true

# Cookie settings
COOKIE_SECRET=your-cookie-secret-change-in-production
COOKIE_DOMAIN=localhost
COOKIE_SECURE=false
COOKIE_HTTP_ONLY=true

# =============================================================================
# 📧 Email Configuration
# =============================================================================

# SMTP settings
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_SECURE=false
SMTP_USER=your-email@gmail.com
SMTP_PASS=your-app-password

# Email templates
EMAIL_FROM=noreply@luxcore.com
EMAIL_FROM_NAME=LuxCore Team

# =============================================================================
# 📊 Logging Configuration
# =============================================================================

# Log level
LOG_LEVEL=info

# Log files
LOG_FILE_PATH=logs
LOG_MAX_SIZE=5242880
LOG_MAX_FILES=5

# =============================================================================
# 🔄 Redis Configuration (Optional)
# =============================================================================

# Redis for session storage and caching
REDIS_URL=redis://localhost:6379
REDIS_PASSWORD=
REDIS_DB=0

# =============================================================================
# 🌐 External Services
# =============================================================================

# File upload (AWS S3 or local)
UPLOAD_PROVIDER=local
UPLOAD_PATH=uploads
AWS_ACCESS_KEY_ID=your-aws-access-key
AWS_SECRET_ACCESS_KEY=your-aws-secret-key
AWS_REGION=us-east-1
AWS_S3_BUCKET=your-s3-bucket

# =============================================================================
# 🔍 Monitoring & Analytics
# =============================================================================

# Application monitoring
SENTRY_DSN=your-sentry-dsn
NEW_RELIC_LICENSE_KEY=your-new-relic-key

# =============================================================================
# 🧪 Testing Configuration
# =============================================================================

# Test database
TEST_DATABASE_URL="postgresql://username:password@localhost:5432/luxcore_test?schema=public"

# Test environment
TEST_NODE_ENV=test

# =============================================================================
# 🚀 Production Configuration
# =============================================================================

# Production settings (override in production)
PRODUCTION_URL=https://your-domain.com
PRODUCTION_API_URL=https://api.your-domain.com

# SSL/TLS
SSL_KEY_PATH=/path/to/ssl/key.pem
SSL_CERT_PATH=/path/to/ssl/cert.pem

# =============================================================================
# 🔧 Development Configuration
# =============================================================================

# Development settings
DEV_MODE=true
DEBUG=true
HOT_RELOAD=true

# Development database
DEV_DATABASE_URL="postgresql://username:password@localhost:5432/luxcore_dev?schema=public"

# =============================================================================
# 📋 Feature Flags
# =============================================================================

# Enable/disable features
ENABLE_EMAIL_VERIFICATION=true
ENABLE_TWO_FACTOR_AUTH=true
ENABLE_SOCIAL_LOGIN=false
ENABLE_API_DOCS=true
ENABLE_MONITORING=true

# =============================================================================
# 🛡️ Security Headers
# =============================================================================

# Security policy
CSP_DEFAULT_SRC="'self'"
CSP_STYLE_SRC="'self' 'unsafe-inline'"
CSP_SCRIPT_SRC="'self'"
CSP_IMG_SRC="'self' data: https:"

# =============================================================================
# 📊 Performance Configuration
# =============================================================================

# Compression
ENABLE_COMPRESSION=true
COMPRESSION_LEVEL=6

# Caching
CACHE_TTL=3600
CACHE_MAX_SIZE=100

# =============================================================================
# 🔄 Background Jobs
# =============================================================================

# Job queue
JOB_QUEUE_URL=redis://localhost:6379/1
JOB_CONCURRENCY=5

# =============================================================================
# 📱 Mobile Configuration
# =============================================================================

# Mobile app settings
MOBILE_API_VERSION=v1
MOBILE_MIN_VERSION=1.0.0

# =============================================================================
# 🌍 Internationalization
# =============================================================================

# i18n settings
DEFAULT_LOCALE=en
SUPPORTED_LOCALES=en,es,fr,de
TIMEZONE=UTC

# =============================================================================
# 📋 Documentation
# =============================================================================

# API documentation
API_DOCS_URL=http://localhost:3000/api/docs
SWAGGER_UI_PATH=/api/docs

# =============================================================================
# 🔧 Maintenance Mode
# =============================================================================

# Maintenance settings
MAINTENANCE_MODE=false
MAINTENANCE_MESSAGE=System is under maintenance. Please try again later.

# =============================================================================
# 📊 Analytics & Tracking
# =============================================================================

# Google Analytics
GA_TRACKING_ID=your-ga-tracking-id

# Mixpanel
MIXPANEL_TOKEN=your-mixpanel-token

# =============================================================================
# 🔐 API Keys (External Services)
# =============================================================================

# Payment processing
STRIPE_SECRET_KEY=your-stripe-secret-key
STRIPE_PUBLISHABLE_KEY=your-stripe-publishable-key

# Social media
TWITTER_API_KEY=your-twitter-api-key
TWITTER_API_SECRET=your-twitter-api-secret

# =============================================================================
# 📋 Notes
# =============================================================================

# Remember to:
# 1. Change all default secrets in production
# 2. Use strong, unique passwords
# 3. Enable HTTPS in production
# 4. Set up proper monitoring
# 5. Configure backup strategies
# 6. Set up CI/CD pipelines
# 7. Configure proper logging
# 8. Set up error tracking
# 9. Configure rate limiting
# 10. Set up security scanning