phaemos/.env.example at main · zaccesss/phaemos · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
# ── Database ──────────────────────────────────────────────────────────────────
DATABASE_URL=postgresql://postgres:password@localhost:5432/phaemos

# ── Redis ─────────────────────────────────────────────────────────────────────
REDIS_URL=redis://localhost:6379

# ── Auth ──────────────────────────────────────────────────────────────────────
SECRET_KEY=change_this_to_a_long_random_secret
ALGORITHM=HS256
ACCESS_TOKEN_EXPIRE_MINUTES=15

# ── Google OAuth (https://console.cloud.google.com) ───────────────────────────
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_REDIRECT_URI=http://localhost:8000/api/v1/auth/google/callback

# ── GitHub OAuth (GitHub > Settings > Developer Settings > OAuth Apps) ─────────
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
GITHUB_REDIRECT_URI=http://localhost:8000/api/v1/auth/github/callback

# ── Apple OAuth (requires Apple Developer Program - $99/yr) ───────────────────
# TODO: implement when Apple Developer Program enrolled (Step 20b)
APPLE_CLIENT_ID=placeholder
APPLE_TEAM_ID=placeholder
APPLE_KEY_ID=placeholder
APPLE_PRIVATE_KEY=placeholder
APPLE_REDIRECT_URI=placeholder

# ── CORS ──────────────────────────────────────────────────────────────────────
ALLOWED_ORIGINS=http://localhost:3000

# ── Environment ───────────────────────────────────────────────────────────────
ENVIRONMENT=development

# ── Notifications (leave blank to disable) ────────────────────────────────────
DISCORD_WEBHOOK_URL=
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASSWORD=
ALERT_EMAIL_TO=

# ── Resend (invitation emails) ────────────────────────────────────────────────
# Sign up at resend.com - free tier: 3,000 emails/month
RESEND_API_KEY=placeholder
FROM_EMAIL=no-reply@phaemos.com

# ── Brevo SMS (critical alert SMS) ───────────────────────────────────────────
# Sign up at brevo.com - free tier: 300 SMS/day
BREVO_API_KEY=
# Sender name shown on the recipient's phone (max 11 chars, no spaces)
BREVO_SMS_SENDER=PHAEMOS

# ── OTA Firmware ──────────────────────────────────────────────────────────────
FIRMWARE_STORAGE_PATH=./firmware_uploads

# ── Cloudflare Turnstile (contact form) ──────────────────────────────────────
# Site key is public (NEXT_PUBLIC_) - visible in the browser
NEXT_PUBLIC_TURNSTILE_SITE_KEY=
# Secret key stays server-side only - never prefix with NEXT_PUBLIC_
TURNSTILE_SECRET_KEY=
# Destination address for contact form submissions
CONTACT_EMAIL_TO=contact@phaemos.com

# ── Frontend (Vercel env vars - set in Vercel dashboard, not committed) ───────
# Google Analytics 4 measurement ID - set in Vercel only, never in this file
NEXT_PUBLIC_GA_ID=
# Public API URL that the Next.js frontend calls
NEXT_PUBLIC_API_URL=http://localhost:8000