.env.example

# Placeholder-only template. Do not commit live user records, OAuth clients, session tokens, JWKS/private keys, MFA/passkey/backup-code material, SAML/SCIM metadata, webhook payloads, migration exports, database URLs, provider tokens, GitHub tokens, npm tokens, or production credentials.
# Keep real values in an untracked local env file or approved secret store.

# Local side-effect guards. Set only in your shell when intentionally running local services, database mutations, destructive cleanup, or identity-provider operations.
LOCAL_SERVICES=no
LOCAL_DB=no
LOCAL_DESTRUCTIVE=no
LOCAL_IDENTITY_OPS=no

# Janua Environment Variables Example
# Copy this file to .env.local for local development
# See CLAUDE.md for port assignments (MADFAM 4100-4199 block)

# ============================================
# LOCAL DEVELOPMENT
# ============================================
NODE_ENV=development
ENVIRONMENT=development

# API Configuration (local dev uses port 8000 internally)
API_PORT=8000
NEXT_PUBLIC_API_URL=http://localhost:8000
NEXT_PUBLIC_APP_URL=http://localhost:3000

# ============================================
# DATABASE (local Docker)
# ============================================
DATABASE_URL=replace-with-database-url
REDIS_URL=replace-with-redis-url

# ============================================
# JWT & AUTHENTICATION
# ============================================
JWT_SECRET=replace-with-jwt-secret
JWT_ISSUER=replace-with-jwt-issuer
JWT_AUDIENCE=replace-with-jwt-audience
JWT_ACCESS_TOKEN_EXPIRE_MINUTES=replace-with-jwt-access-token-expire-minutes
JWT_REFRESH_TOKEN_EXPIRE_DAYS=replace-with-jwt-refresh-token-expire-days

# ============================================
# SECURITY
# ============================================
SECRET_KEY=replace-with-secret-key

# ============================================
# EMAIL (Resend - MADFAM centralized)
# ============================================
RESEND_API_KEY=replace-with-resend-api-key
# One sender for every platform, on the one Resend-verified domain.
# See docs/EMAIL_SENDER_POLICY.md before changing either of these.
EMAIL_FROM_ADDRESS=hola@madfam.io
EMAIL_FROM_NAME=MADFAM

# ============================================
# OPTIONAL: Monitoring
# ============================================
# SENTRY_DSN=your-sentry-dsn

# ============================================
# OPTIONAL: Cloudflare Services
# ============================================
# CLOUDFLARE_TURNSTILE_SITE_KEY=your-turnstile-key
# CLOUDFLARE_TURNSTILE_SECRET=your-turnstile-secret