.env.example

# Database
# For local development (non-Docker):
DATABASE_URL=postgresql://postgres:changeme@localhost:5432/bsds_dashboard
# For Docker Compose — DB_PASSWORD is used by the postgres container and app service:
DB_PASSWORD=changeme

# NextAuth
NEXTAUTH_SECRET=your-secret-key-here
NEXTAUTH_URL=http://localhost:3000

# Razorpay
RAZORPAY_KEY_ID=rzp_test_xxxxx
RAZORPAY_KEY_SECRET=your-razorpay-secret
RAZORPAY_WEBHOOK_SECRET=your-webhook-secret
RAZORPAY_TEST_MODE=true

# WhatsApp (Meta Cloud API) — optional, graceful skip if missing
WHATSAPP_API_TOKEN=
WHATSAPP_PHONE_NUMBER_ID=
WHATSAPP_BUSINESS_ACCOUNT_ID=

# Encryption (AES-256 for PII at rest — generate with: openssl rand -hex 32)
ENCRYPTION_KEY=your-32-byte-hex-key

# Cron (for automated external cron triggers — POST /api/cron with x-cron-secret header)
CRON_SECRET=your-cron-secret-here

# App
APP_URL=http://localhost:3000
NODE_ENV=development

# UI + internal data brand code (used for dashboard labels, member IDs, receipt IDs, system email)
# Default: BSDS
NEXT_PUBLIC_DATA_BRAND_CODE=BSDS

# Test mode — set to true to show test account auto-fill buttons on the login page
# Buttons are always shown in development (NODE_ENV !== 'production').
# Set to true in staging/preview environments to enable test accounts there too.
NEXT_PUBLIC_TEST_MODE=false