.env.example

OPENAI_API_KEY=sk-...
# Primary image + video provider.
OPENROUTER_API_KEY=sk-or-...
# Fallback for image jobs only (gateway video is not reachable over REST).
# Optional in dev; without it the executor surfaces OpenRouter errors directly
# instead of falling back.
AI_GATEWAY_API_KEY=
OPENAI_INTENT_MODEL=gpt-4.1
OPENAI_PLANNER_MODEL=gpt-4.1
OPENAI_VISION_MODEL=gpt-4o
BACKEND_PORT=8000

# --- Single-user admin gate ---
# Override to change the login credentials. Defaults are admin / 1601admin.
AUTH_USERNAME=admin
AUTH_PASSWORD=1601admin
# Secret used to sign the session cookie. Generate one with
# `python -c "import secrets; print(secrets.token_urlsafe(48))"` and pin it
# in production — without it, sessions are invalidated on every restart.
AUTH_SESSION_SECRET=
# In production over HTTPS, set this to 1 so the session cookie is sent only
# over TLS connections. Leave 0 for local dev.
AUTH_COOKIE_HTTPS_ONLY=0

# --- CORS allow-list for production (comma-separated). Localhost is allowed
#     automatically in dev. ---
# FRONTEND_ORIGINS=https://your-frontend.onrender.com

# --- Supabase (Postgres + Storage). REQUIRED. ---
# 1. Create a Supabase project
# 2. Either:
#    a. paste the contents of backend/migrations/001_cms.sql in the Supabase
#       SQL editor and run; OR
#    b. set DATABASE_URL below and run `python -m backend.migrate` once.
# 3. Paste the URL and service-role JWT below
SUPABASE_URL=https://<project>.supabase.co
SUPABASE_SERVICE_ROLE_KEY=
SUPABASE_ASSETS_BUCKET=atelier-assets
# Direct Postgres URL (Project Settings → Database → Connection string → URI).
# The `@` in the password must be percent-encoded as `%40`.
DATABASE_URL=postgresql://postgres:<password>@db.<project>.supabase.co:5432/postgres