.env.example

# Server Configuration
PORT=3001

# Supabase Configuration (REQUIRED)
NEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co
NEXT_PUBLIC_SUPABASE_ANON_KEY=your_supabase_anon_key

# Auth0 Configuration (REQUIRED)
# Get these from your Auth0 Dashboard > Applications > Your App
AUTH0_SECRET=use-openssl-rand-hex-32-to-generate
AUTH0_DOMAIN=your-tenant.auth0.com
AUTH0_CLIENT_ID=your_client_id
AUTH0_CLIENT_SECRET=your_client_secret
APP_BASE_URL=http://localhost:3000
NEXT_PUBLIC_SITE_URL=http://localhost:3000

# Admin Access Control (comma-separated emails, leave empty to allow all authenticated users)
ALLOWED_ADMIN_EMAILS=your@gmail.com

# API Provider Configuration
# Choose: "openai" or "custom"
API_PROVIDER=openai

# OpenAI Configuration (required when API_PROVIDER=openai)
OPENAI_API_KEY=your_openai_api_key_here
OPENAI_MODEL=gpt-3.5-turbo
OPENAI_MAX_TOKENS=1000
OPENAI_TEMPERATURE=0.1

# Custom API Configuration (required when API_PROVIDER=custom)
CUSTOM_API_URL=https://api.micr.dev/v1
CUSTOM_API_KEY=your_custom_bearer_token_here
CUSTOM_API_MODEL=your_chosen_model
CUSTOM_API_MAX_TOKENS=1000
CUSTOM_API_TEMPERATURE=0.1

# Notification Configuration (optional)
NTFY_URL=https://ntfy.sh/your-topic

# Security Notes:
# 1. Never commit actual API keys or passwords to version control
# 2. Generate AUTH0_SECRET with: openssl rand -hex 32
# 3. Enable Google and GitHub social connections in Auth0 Dashboard
# 4. For production, consider using environment-specific configuration management
# 5. Rotate API keys periodically