.env.production.example

# CookQuest — Production Environment Variables
# Copy to .env on your production server and fill in ALL values.
# No defaults are used in production — every variable must be set explicitly.

# ── Domain ──
DOMAIN=cookquest.app

# ── PostgreSQL ──
POSTGRES_USER=cookquest
POSTGRES_PASSWORD=REPLACE_WITH_STRONG_PASSWORD
POSTGRES_DB=cookquest

# ── Redis ──
REDIS_PASSWORD=REPLACE_WITH_STRONG_PASSWORD

# ── Authentication ──
# Generate with: openssl rand -base64 64
JWT_SECRET=REPLACE_WITH_RANDOM_SECRET_AT_LEAST_64_CHARS

# ── URLs ──
# FRONTEND_URL: Used by the backend for CORS and CSRF origin checks.
FRONTEND_URL=https://cookquest.app

# NEXT_PUBLIC_API_URL: Baked into the Next.js client bundle at build time.
# Must be the public URL that browsers will use to reach the API.
NEXT_PUBLIC_API_URL=https://cookquest.app/api/v1

# ALLOWED_ORIGINS: Comma-separated list of origins allowed by CORS.
# If not set, falls back to FRONTEND_URL.
ALLOWED_ORIGINS=https://cookquest.app

# ── Runtime ──
NODE_ENV=production

# ── Backups ──
# Number of days to retain database backups (default: 7)
BACKUP_RETAIN_DAYS=7