-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy path.env.example
More file actions
57 lines (51 loc) · 2.3 KB
/
Copy path.env.example
File metadata and controls
57 lines (51 loc) · 2.3 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
# Supabase (public — exposed to the browser; use the anon key)
PUBLIC_SUPABASE_URL=https://your-project.supabase.co
PUBLIC_SUPABASE_KEY=your-supabase-anon-key
# Supabase (private — server only; service role key for supabaseAdmin)
SUPABASE_KEY=your-supabase-service-role-key
# Razorpay
PUBLIC_RAZORPAY_ID=your-razorpay-key-id
RAZORPAY_KEY=your-razorpay-key-secret
# Optional
PUBLIC_IS_PRODUCTION=false
PUBLIC_SITE_URL=http://localhost:5173
PUBLIC_VERCEL_URL=
# Optional: Google Search Console site verification token
PUBLIC_GOOGLE_SITE_VERIFICATION=
# API service (Hono + Drizzle) — used by api/
# SvelteKit proxies browser requests to this origin via /api/*
API_ORIGIN=http://localhost:3001
# POSTGRES_URL: Supabase session pooler URL (recommended for serverless/pooled connections)
POSTGRES_URL=postgresql://postgres:password@db.your-project.supabase.co:6543/postgres
# DATABASE_URL is preferred by api/; POSTGRES_URL is accepted as a fallback alias.
DATABASE_URL=postgresql://postgres:password@db.your-project.supabase.co:5432/postgres
API_PORT=3001
# Comma-separated browser origins allowed for CSRF on guest cart/checkout mutations (must include the web app origin).
API_CORS_ORIGINS=http://localhost:5173
SUPABASE_URL=https://your-project.supabase.co
SUPABASE_ANON_KEY=your-supabase-anon-key
CLIENT_ID_COOKIE_NAME=clientId
# Optional: when set, api/ expects clientId cookies as "<uuid>.<hmac>" (see api/src/lib/client-id.ts)
# CLIENT_ID_SIGNING_SECRET=generate-a-long-random-secret
RATE_LIMIT_WINDOW_MS=60000
RATE_LIMIT_MAX_REQUESTS=120
# SMTP email (api transactional + auth mail)
# Resend example: host=smtp.resend.com, port=465, user=resend, secure=true (auto-enabled on 465)
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASS=
# SMTP_PASSWORD is accepted as an alias for SMTP_PASS
SMTP_SECURE=false
EMAIL_FROM=Selfcrafted <noreply@selfcrafted.in>
ORDERS_INBOX_EMAIL=orders@selfcrafted.in
SITE_URL=http://localhost:5173
# Comma-separated staff user UUIDs for /admin/makers and /admin/listings review queues
STAFF_USER_IDS=
# Error monitoring (optional — Sentry protocol; works with self-hosted GlitchTip on Dokploy)
# Web server (SvelteKit hooks.server.ts)
SENTRY_DSN=
# Browser (SvelteKit hooks.client.ts)
PUBLIC_SENTRY_DSN=
# API service (api/src/server.ts)
# SENTRY_DSN is shared with the API when using the same .env at repo root