.env.example

# Docker Compose configuration. Copy to .env and replace these values.
POSTGRES_DB=manisa
POSTGRES_USER=manisa
POSTGRES_PASSWORD=replace-with-a-strong-database-password
POSTGRES_PORT=5432

AUTH_SECRET=replace-with-output-from-openssl-rand-base64-32
PLATFORM_SETUP_TOKEN=replace-with-output-from-openssl-rand-base64-32
# Keep false for local-network HTTP. Set true behind production HTTPS.
SESSION_COOKIE_SECURE=false
DEFAULT_STORAGE_QUOTA_BYTES=10737418240

# S3-compatible media storage. S3_PUBLIC_ENDPOINT must be reachable by browsers.
S3_ACCESS_KEY=manisa
S3_SECRET_KEY=replace-with-a-long-object-storage-secret
S3_PUBLIC_ENDPOINT=http://192.168.1.114:9000
S3_REGION=us-east-1
S3_PRIVATE_BUCKET=manisa-private
S3_PUBLIC_BUCKET=manisa-public
MINIO_API_PORT=9000
MINIO_CONSOLE_PORT=9001

# Use 0.0.0.0 to test from another device on your local network.
BIND_ADDRESS=0.0.0.0
WEB_PORT=3000
API_PORT=8000

# Optional live Google Calendar credentials.
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_CALENDAR_ID=primary
GOOGLE_AUTH_REDIRECT_URI="https://your-domain.example/api/auth/google/callback"
GOOGLE_CALENDAR_REDIRECT_URI="https://your-domain.example/api/integrations/google-calendar/callback"
GOOGLE_CALENDAR_SYNC_SECRET=replace-with-output-from-openssl-rand-base64-32
# Enable only while approving a new studio administrator account, then turn it off.
GOOGLE_AUTH_ALLOW_SIGNUP=false

# Public landing page business details. These values are safe to expose to browsers.
NEXT_PUBLIC_BUSINESS_ADDRESS="77 Finch Avenue East, Toronto, Ontario"
NEXT_PUBLIC_INSTAGRAM_URL="https://www.instagram.com/nail_toronto_manisa/"

# Optional Instagram Professional integration. The callback must be public HTTPS.
INSTAGRAM_APP_ID=
INSTAGRAM_APP_SECRET=
INSTAGRAM_REDIRECT_URI="https://your-domain.example/api/integrations/instagram/callback"
# Generate separately from AUTH_SECRET: openssl rand -base64 32
INTEGRATION_ENCRYPTION_KEY=

# Separate internal secret used by the hourly Trash cleanup worker.
TRASH_CLEANUP_SECRET=replace-with-output-from-openssl-rand-base64-32