env.example

# Openfront Gym environment contract
# Copy to .env and replace every value needed by the flows you enable.
# Never commit real credentials.

# Core runtime (required in strict/production mode)
DATABASE_URL=postgresql://postgres:postgres@localhost:5432/openfront_gym_dev
SESSION_SECRET=replace-with-at-least-32-random-characters
NEXTAUTH_URL=http://localhost:3000
# Optional internal same-process GraphQL origin for server-to-server requests.
INTERNAL_GRAPHQL_URL=http://127.0.0.1:3000

# Public storefront tenant binding.
# Optional only when the database has exactly one active Organization and public signup is disabled.
# Required for multiple Organizations and whenever PUBLIC_SIGNUPS_ALLOWED=true.
# STOREFRONT_ORGANIZATION_ID=gym_organization_id

# Object storage (required in strict/production mode)
S3_BUCKET_NAME=
S3_REGION=
S3_ENDPOINT=
S3_ACCESS_KEY_ID=
S3_SECRET_ACCESS_KEY=

# Email and password reset
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASSWORD=
SMTP_FROM=
SMTP_STORE_LINK=http://localhost:3000
CONTACT_FORM_TO=

# Public member signup is fail-closed unless explicitly enabled and tenant-bound.
# When enabled, this must exactly match STOREFRONT_ORGANIZATION_ID.
PUBLIC_SIGNUPS_ALLOWED=false
# PUBLIC_SIGNUP_ORGANIZATION_ID=gym_organization_id

# Stripe membership billing (required in strict/production mode)
STRIPE_SECRET_KEY=
NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY=
STRIPE_WEBHOOK_SECRET=
# Required for Stripe Connect / multi-tenant account-routed webhooks.
# STRIPE_ACCOUNT_ID=acct_...
# Never enable in production. Used only by isolated payment tests.
PAYMENT_TEST_MODE=false
# PAYMENT_TEST_WEBHOOK_SECRET=replace-with-at-least-32-random-characters

# Rotating member QR codes
QR_CODE_SECRET=replace-with-at-least-32-random-characters

# Staff-unlocked kiosk. Both values are required for /kiosk/check-in.
# The browser exchanges this credential for a 12-hour HttpOnly kiosk session.
KIOSK_API_TOKEN=replace-with-at-least-32-random-characters
KIOSK_ORGANIZATION_ID=gym_organization_id

# Partner discovery is fail-closed unless every enabled boundary is configured.
# DISCOVERY_API_KEY=replace-with-at-least-32-random-characters
# DISCOVERY_ORGANIZATION_ID=gym_organization_id
# DISCOVERY_API_SCOPES=classes:read,bookings:create
# DISCOVERY_PARTNER_ALLOWLIST=partner-example

# Optional AI completion route
# OPENROUTER_API_KEY=
# OPENROUTER_MODEL=
# OPENROUTER_MAX_TOKENS=1024