.env.example

# ============================================
# Smart Split - Environment Variables
# ============================================
# Copy this file to .env.local and fill in your values
# NEVER commit .env.local or any file with actual secrets
# ============================================

# Supabase Configuration
# Get these from: https://supabase.com/dashboard/project/YOUR_PROJECT/settings/api
NEXT_PUBLIC_SUPABASE_URL=https://your-project-id.supabase.co
NEXT_PUBLIC_SUPABASE_ANON_KEY=eyJ...your-anon-key...

# Site URL for OAuth redirects
# Production: https://your-domain.vercel.app
# Development: http://localhost:3000
NEXT_PUBLIC_SITE_URL=http://localhost:3000

# Upstash Redis (for caching/rate limiting)
# Get these from: https://console.upstash.com/
UPSTASH_REDIS_REST_URL=https://your-redis.upstash.io
UPSTASH_REDIS_REST_TOKEN=your-upstash-token

# CSRF Protection (generate: openssl rand -hex 32)
CSRF_SECRET=your-random-csrf-secret-key-here-at-least-32-chars

# Encryption Key for URL IDs (generate: openssl rand -base64 32)
ENCRYPTION_KEY=your-base64-encryption-key

# Resend API Key (for email notifications)
# Get from: https://resend.com/api-keys
RESEND_API_KEY=re_your_resend_api_key

# Cron Secret (for scheduled jobs authentication)
# Generate: openssl rand -base64 32
CRON_SECRET=your-cron-secret

# Gemini API Key (for AI features)
# Get from: https://aistudio.google.com/app/apikey
GEMINI_API_KEY=your-gemini-api-key

 
# Google reCAPTCHA v3 (for bot protection)
# Get from: https://www.google.com/recaptcha/admin
# Create a new site with reCAPTCHA v3

#Note: These are Google's official test keys - they always pass verification and show "reCAPTCHA for testing purposes only". 
#Perfect for development, but replace with real keys in production.

NEXT_PUBLIC_RECAPTCHA_SITE_KEY=6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI
RECAPTCHA_SECRET_KEY=6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe