env.example

# ============================================================================
# Community Pro API — environment template
# Copy to `.env` and fill in real values. `.env` is gitignored — never commit it.
# Loaded automatically in dev (DotNetEnv) and by docker compose (env_file).
# Vars already set in the process environment (e.g. by compose) win over `.env`.
# ============================================================================

# --- Core ------------------------------------------------------------------
# Frontend origin: drives CORS and the post-OAuth redirect back to the Next.js relay.
FRONTEND_URL=http://localhost:3000

# Postgres connection — two accepted forms, DATABASE_URL wins when both are set:
#   DATABASE_URL: postgres:// URI as issued by Render/most managed Postgres
#     (SSL defaults to Require; append ?sslmode=disable for local/plain connections)
#   ConnectionStrings__Default: standard Npgsql keyword string
# Local dev outside Docker already works via appsettings.Development.json (host port
# 5434 — 5432/5433 are taken by other Postgres instances on this machine); docker
# compose overrides to the `postgres` service. Set one of these only for deployment.
DATABASE_URL=
# ConnectionStrings__Default=Host=localhost;Port=5434;Database=communitypro;Username=communitypro;Password=communitypro

# Deployment: run EF migrations + role seeding at boot (Development always does).
# Set true on Render until the CI migration step (Phase 10.3) exists, then remove.
MIGRATE_ON_STARTUP=true

# --- Phase 1: Identity & Membership Activation ------------------------------
# GitHub OAuth app (Settings → Developer settings → OAuth Apps).
#   Homepage URL:               http://localhost:3000
#   Authorization callback URL: http://localhost:5080/signin-github
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=

# Org + practice repo slugs (NOT full URLs) used to validate activation webhooks.
GITHUB_ORG=CommunityPro
PRACTICE_REPO=Practice-Contribution

# Secret configured on the practice-repo webhook (pull_request events)
# pointing at POST /webhooks/github/practice-repo.
GITHUB_PRACTICE_REPO_WEBHOOK_SECRET=

# HS256 signing key for access tokens. Minimum 32 characters; generate with:
#   openssl rand -base64 48
JWT_SIGNING_KEY=

# Optional: comma-separated GitHub logins granted the admin role on sign-in.
ADMIN_GITHUB_LOGINS=

# Brevo SMTP relay (transactional email: welcome-on-activation, later blog/mentorship mail).
SMTP_HOST=smtp-relay.brevo.com
SMTP_PORT=465
SMTP_USER=
SMTP_PASSWORD=
SMTP_FROM=
SMTP_FROM_NAME=Community Pro

# --- Phase 2: Members (Cloudinary signed avatar uploads) --------------------
CLOUDINARY_CLOUD_NAME=
CLOUDINARY_API_KEY=
CLOUDINARY_API_SECRET=

# --- Phase 3: Search (Meilisearch) ------------------------------------------
# docker compose overrides the host to the `meilisearch` service internally.
MEILISEARCH_HOST=http://localhost:7700
MEILISEARCH_MASTER_KEY=communitypro-local-master-key

# --- Phase 4: Content (blog) -------------------------------------------------
# Shared secret for POST {FRONTEND_URL}/api/revalidate calls on post approval.
REVALIDATE_SECRET=

# --- Phase 5: Contributors (GitHub org stats) --------------------------------
# Secret on the org-level webhook pointing at POST /webhooks/github/org.
GITHUB_ORG_WEBHOOK_SECRET=
# PAT (read-only, repo/pulls scope) for the backfill-contributions command.
GITHUB_API_TOKEN=

# --- Phase 7: Sponsorship (Stripe) --------------------------------------------
STRIPE_SECRET_KEY=
STRIPE_WEBHOOK_SECRET=

# --- Phase 9: Analytics (PostHog, server-side money events) ------------------
POSTHOG_API_KEY=
POSTHOG_HOST=https://eu.i.posthog.com