-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathenvironment.example
More file actions
81 lines (67 loc) · 2.63 KB
/
Copy pathenvironment.example
File metadata and controls
81 lines (67 loc) · 2.63 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
# RevampIT Unified Environment Configuration
# Copy this file to .env.local and fill in your values
# ==========================================
# MAIN APPLICATION (Next.js)
# ==========================================
# Auth.js — generate: openssl rand -base64 64
AUTH_SECRET=your-super-secret-auth-key-change-in-production-min-32-chars
NEXTAUTH_URL=http://localhost:3001
NEXTAUTH_SECRET=your-super-secret-auth-key-change-in-production-min-32-chars
# Database — SSOT: DATABASE_URL (app + auth share one pool)
# Local dev: Docker Postgres from docker-compose.yml (port 5433)
DATABASE_URL=postgresql://postgres:postgres@localhost:5433/revampit_cms
# Optional discrete parts (used when DATABASE_URL is unset)
DB_HOST=localhost
DB_PORT=5433
DB_NAME=revampit_cms
DB_USER=postgres
DB_PASSWORD=postgres
DB_SSL=false
# Optional Redis for auth rate limiter/lockout
REDIS_URL=redis://localhost:6380
ENABLE_REDIS_RATE_LIMITER=true
MEILI_MASTER_KEY=masterKey_change_in_production
MEILI_PORT=7700
# ==========================================
# PAYREXX (online payments — optional in dev)
# ==========================================
# SSOT: src/config/payrexx.ts · Setup: docs/operations/PAYREXX_SETUP.md
# Dev: leave unset → mock redirect at /api/payments/payrexx-mock-redirect
# PAYREXX_INSTANCE=your_instance_name
# PAYREXX_API_SECRET=your_api_secret
# PAYREXX_WEBHOOK_SECRET=your_webhook_signing_secret
# ==========================================
# SERVER
# ==========================================
PORT=3001
NODE_ENV=development
JWT_SECRET=your-super-secret-jwt-key-change-in-production-min-32-chars
JWT_EXPIRES_IN=24h
FRONTEND_URL=http://localhost:3001
NEXT_PUBLIC_SITE_URL=http://localhost:3001
# Feature flags
ENABLE_CMS=false
NEXT_PUBLIC_ENABLE_ROLE_SELECTION_ON_REGISTER=false
# Admin bootstrap (setup scripts only)
# ADMIN_PASSWORD=your-secure-admin-password-here
# Email — local dev uses Mailpit (docker-compose port 1025 / UI 8025)
EMAIL_HOST=localhost
EMAIL_PORT=1025
EMAIL_SECURE=false
EMAIL_USER=
EMAIL_PASS=
EMAIL_FROM=noreply@revamp-it.ch
# File uploads (local fallback)
UPLOAD_DIR=./uploads
MAX_FILE_SIZE=10485760
# ==========================================
# PRODUCTION OPS (optional — gitignored)
# ==========================================
# See .env.selfhost.local.example for Hetzner prod access via SSH tunnel.
# ==========================================
# SECURITY NOTES
# ==========================================
# 1. NEVER commit .env.local or .env.selfhost.local
# 2. Prod DB: self-hosted Postgres 17 on Hetzner (not cloud-hosted)
# 3. Dev DB: local Docker (npm run services:up)
# 4. Use HTTPS in production (required for secure cookies)