# ────────────────────────────────────────────────────────────────────────
# Africa Alert PWA — environment configuration template
# ────────────────────────────────────────────────────────────────────────
#
# Copy this file to `.env` at the repo root and fill in real values.
# `.env` is gitignored; never commit secrets.
#
# Dev: `node server/src/index.js` loads `.env` from the server cwd
# automatically (see server/src/index.js for the loader).
# Prod: load .env via your orchestrator (Docker, systemd, k8s secret).
#
# `server/src/config/index.js` is the single source of truth for which
# vars are required. The server exits non-zero on startup if a required
# var is missing in production. See `.harness/docs/conventions.md` for
# the environment contract.

# ─── Node / runtime ────────────────────────────────────────────────────
NODE_ENV=development
PORT=3001
DB_PATH=./data/school.db

# ─── Auth (REQUIRED in production) ─────────────────────────────────────
# HMAC secret for JWT signing/verification.
# Generate with:  node -e "console.log(require('crypto').randomBytes(48).toString('hex'))"
JWT_SECRET=replace-me-with-64-byte-hex

# Comma-separated CORS allow-list. NO wildcard allowed in production.
ALLOWED_ORIGINS=http://localhost:3000

# When true, /api/auth/login response includes `offline_jwt_secret` so the
# client can mint JWTs while offline. Must be 'true' or 'false'.
ALLOW_CLIENT_OFFLINE_MINT=true

# ─── Paynow (Zimbabwean payment gateway) ────────────────────────────────
# Credentials are issued at https://www.paynow.co.zw after registering an
# integration. PAYNOW_INTEGRATION_KEY signs outbound requests AND inbound
# webhooks — keep it secret.
PAYNOW_INTEGRATION_ID=
PAYNOW_INTEGRATION_KEY=

# Where Paynow should send status updates and where users land after pay.
PAYNOW_RETURN_URL=http://localhost:3000/fees
PAYNOW_BLOCKING_URL=http://localhost:3000/api/payments/webhook

# Set to 'true' ONLY for local dev and Playwright tests that simulate
# Paynow and need to hit the webhook without a real signature. In
# production leave unset — webhook signature verification is enforced.
# PAYNOW_SKIP_VERIFY=false

# ─── Supabase (optional — sync is no-op when empty) ───────────────────
# Server-side credentials. The sync engine skips when SUPABASE_KEY is empty.
SUPABASE_URL=
SUPABASE_KEY=

# Same values exposed to the client bundle. The PWA reads these at build
# time via Vite's import.meta.env (only VITE_-prefixed vars are inlined).
VITE_SUPABASE_URL=
VITE_SUPABASE_ANON_KEY=

# ─── SMTP (optional — password recovery emails) ────────────────────────
# When SMTP_HOST is unset, EmailService falls back to Ethersoft preview
# mode (dev only). In production set SMTP_HOST to send real mail.
SMTP_HOST=
SMTP_PORT=587
SMTP_SECURE=false
SMTP_USER=
SMTP_PASS=
SMTP_FROM="NextGen Support <support@nextgen.edu>"

# ─── Sync tuning ───────────────────────────────────────────────────────
# Override the default 30s sync interval (in seconds). Empty = default.
# SYNC_INTERVAL=30