# ============================================================================
# Altricade Messenger — environment template.
# Copy to `.env` (gitignored) and replace every value below.
# The values here are CLEARLY-FAKE dev placeholders — NEVER use in production.
# ============================================================================

# --- General ---
NODE_ENV=development

# --- Backend (Fastify) ---
BACKEND_PORT=4000
# Public base URL nginx exposes the API under (used for CORS, links).
PUBLIC_API_URL=http://localhost:8080

# --- App auth tokens (Phase 1) ---
# Signing key for short-lived access JWTs. Generate: `openssl rand -base64 48`
JWT_ACCESS_SECRET=dev-CHANGE-ME-access-secret-not-for-prod
ACCESS_TOKEN_TTL=15m
REFRESH_TOKEN_TTL=30d

# --- Centrifugo connection token (SEPARATE from app tokens) ---
# HMAC secret SHARED between backend (mints) and Centrifugo (verifies).
# Generate: `openssl rand -base64 48`
CENTRIFUGO_TOKEN_HMAC_SECRET=dev-CHANGE-ME-centrifugo-hmac-not-for-prod
# API key the backend uses to call Centrifugo's server HTTP API (publish, etc).
CENTRIFUGO_API_KEY=dev-CHANGE-ME-centrifugo-api-key
# Internal URL of the Centrifugo HTTP API (service name on the compose network).
CENTRIFUGO_API_URL=http://centrifugo:8000/api
# Lifetime of the Centrifugo connection token the backend mints.
CENTRIFUGO_TOKEN_TTL=1h

# --- Postgres ---
POSTGRES_HOST=postgres
POSTGRES_PORT=5432
POSTGRES_DB=altricade
POSTGRES_USER=altricade
POSTGRES_PASSWORD=dev-CHANGE-ME-postgres-password
# Full URL derived from the above (used by backend + migrations).
DATABASE_URL=postgres://altricade:dev-CHANGE-ME-postgres-password@postgres:5432/altricade

# --- Redis (Centrifugo scaling + history/recovery; auth rate-limiting later) ---
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_URL=redis://redis:6379

# --- MinIO (object storage: media messages + avatars) ---
MINIO_ROOT_USER=altricade
MINIO_ROOT_PASSWORD=dev-CHANGE-ME-minio-password
MINIO_ENDPOINT=minio
MINIO_PORT=9000
MINIO_USE_SSL=false
MINIO_BUCKET_MEDIA=media
MINIO_BUCKET_AVATARS=avatars

# --- nginx (public entrypoint) ---
NGINX_HTTP_PORT=8080

# --- Web (Vite) ---
# Base URL the web client points at for REST + realtime.
VITE_API_URL=http://localhost:8080