.env.example

# =============================================================================
# FieldTrack API — Environment
# Copy to .env and fill values. Do NOT commit real secrets.
# =============================================================================

# --- Core ---
CONFIG_VERSION=1
APP_ENV=development
NODE_ENV=development
PORT=3000

# --- URLs ---
APP_BASE_URL=
API_BASE_URL=
FRONTEND_BASE_URL=http://localhost:3000

# --- CORS ---
CORS_ORIGIN=

# --- Supabase ---
SUPABASE_URL=https://your-project-ref.supabase.co
SUPABASE_ANON_KEY=
SUPABASE_SERVICE_ROLE_KEY=
# JWT signing secret — for local test server only (tests/setup/test-server.ts).
# NOT validated by env.ts. NOT required in production (production uses JWKS via Supabase auth).
SUPABASE_JWT_SECRET=

# --- Redis ---
# Production/Docker: Redis runs as 'redis' container on api_network (canonical contract).
# Local development with Redis on the host: override REDIS_URL in your local .env (see docs/env-contract.md).
REDIS_URL=redis://redis:6379

# --- Security ---
METRICS_SCRAPE_TOKEN=

# --- Observability ---
TEMPO_ENDPOINT=http://tempo:4318
SERVICE_NAME=fieldtrack-api
# GITHUB_SHA= (auto-injected)

# --- HTTP ---
BODY_LIMIT_BYTES=1000000
REQUEST_TIMEOUT_MS=30000

# --- Workers ---
# Set to true in production (Redis must be provisioned). false in dev/CI.
WORKERS_ENABLED=false
MAX_QUEUE_DEPTH=1000
MAX_POINTS_PER_SESSION=50000
MAX_SESSION_DURATION_HOURS=168
WORKER_CONCURRENCY=1
ANALYTICS_WORKER_CONCURRENCY=5
WEBHOOK_WORKER_CONCURRENCY=5

# --- Webhook DLQ ---
WEBHOOK_DLQ_MAX_SIZE=10000
WEBHOOK_DLQ_RETENTION_DAYS=30
WEBHOOK_MAX_PAYLOAD_BYTES=262144