.env.example

# ─────────────────────────────────────────────────────────────
# Spellhand — Environment variables
# Copy this file to `.env.local` and fill in values for local dev.
# `.env.local` is gitignored and never committed.
# ─────────────────────────────────────────────────────────────

# ─── Supabase (Phase 2+) ──────────────────────────────────────
# From your Supabase project → Settings → API.
# Either key naming works:
#   - legacy: `anon` / `service_role`
#   - new:    `sb_publishable_xxx` / `sb_secret_xxx`
NEXT_PUBLIC_SUPABASE_URL=https://your-project-ref.supabase.co
NEXT_PUBLIC_SUPABASE_ANON_KEY=eyJhbGc...

# Server-only — used for admin operations (Phase 3+). Never expose.
# Skip the NEXT_PUBLIC_ prefix.
SUPABASE_SERVICE_ROLE_KEY=eyJhbGc...

# ─── Public site URL ──────────────────────────────────────────
# Used by auth flows (email redirect) and certificate share links.
# In production, set this to the deployed origin.
NEXT_PUBLIC_SITE_URL=http://localhost:3000

# ─── In Supabase dashboard ────────────────────────────────────
# 1. Project Settings → Auth → URL Configuration:
#       Site URL              = NEXT_PUBLIC_SITE_URL value
#       Additional Redirect   = http://localhost:3000/auth/callback
#                               <deployed-origin>/auth/callback
# 2. SQL Editor → run `supabase/migrations/0001_initial.sql`
# 3. (Optional) Auth → Email Templates → customise the magic link email