.env.example

# SQLNoir — environment variables
#
# Copy this file to `.env.local` and fill in real values.
# NEVER commit `.env.local` or real secret values. Placeholders only here.
# `NEXT_PUBLIC_*` vars are exposed to the browser; everything else is server-only.

# ── Supabase ─────────────────────────────────────────────────
# Project URL + anon (public) key — used by the browser client.
NEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co
NEXT_PUBLIC_SUPABASE_ANON_KEY=eyJxxx
# Where Supabase redirects after OAuth (e.g. Google) sign-in.
# Defaults to the current origin if unset; set explicitly in prod.
NEXT_PUBLIC_SUPABASE_REDIRECT_URL=http://localhost:3000/auth/callback
# Service-role key — server-side only (admin/license operations). Keep secret.
SUPABASE_SERVICE_ROLE_KEY=eyJxxx

# Legacy Vite-prefixed Supabase vars (still referenced by older scripts).
# Mirror the NEXT_PUBLIC_ values above if needed.
VITE_SUPABASE_URL=https://your-project.supabase.co
VITE_SUPABASE_ANON_KEY=eyJxxx

# ── PostHog (analytics) ──────────────────────────────────────
# Without NEXT_PUBLIC_POSTHOG_KEY, analytics silently no-op in dev.
NEXT_PUBLIC_POSTHOG_KEY=phc_xxx
NEXT_PUBLIC_POSTHOG_HOST=https://us.i.posthog.com

# ── Stripe (payments) ────────────────────────────────────────
# Publishable key is browser-exposed; secret + webhook secret are server-only.
NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY=pk_test_xxx
STRIPE_SECRET_KEY=sk_test_xxx
STRIPE_WEBHOOK_SECRET=whsec_xxx
# Optional: product image shown on the Stripe Checkout / dynamic price.
STRIPE_PRODUCT_IMAGE_URL=https://your-site.com/product-image.png

# ── Google OAuth ─────────────────────────────────────────────
# Google sign-in is configured in the Supabase dashboard
# (Authentication → Providers → Google): set the Google client ID/secret there.
# The app only needs the Supabase URL/anon key above plus the redirect URL.
# Add the Google OAuth client credentials here only if you wire them directly:
# GOOGLE_CLIENT_ID=xxxxx.apps.googleusercontent.com
# GOOGLE_CLIENT_SECRET=xxx

# ── Site / feature flags ─────────────────────────────────────
# Public base URL of the deployment (used for absolute links, SEO, redirects).
NEXT_PUBLIC_SITE_URL=http://localhost:3000
# Master switch for paid monetization (paywall + Stripe checkout). "1" to enable.
NEXT_PUBLIC_ENABLE_MONETIZATION=0