.env.example

# Example configurations via environment variables (see README.md | Configuration):

# Example configuration via JSON:
NEST_SERVER_CONFIG='{
  "env": "dotenv",
  "email": {
      "mailjet": {
          "api_key_private": 7,
          "api_key_public": "EMAIL_MAILJET_API_KEY_PUBLIC"
      },
      "smtp": {
          "auth": {
              "pass": "EMAIL_SMTP_AUTH_PASS",
              "user": "EMAIL_SMTP_AUTH_USER"
          }
      }
  },
  "jwt": {
      "refresh": {
          "secret": "JWT_REFRESH_SECRET"
      },
      "secret": "JWT_SECRET"
  }
}'

# Example configuration via single Nest Server Config environment variables:
NSC__EMAIL__DEFAULT_SENDER__EMAIL=jon.doe@ethereal.email

# =============================================================================
# Better-Auth Configuration (optional - for modern authentication)
# =============================================================================

# Better-Auth secret (minimum 32 characters)
# Falls back to jwt.secret if not set, or auto-generates for development
# IMPORTANT: Set explicitly in production!
BETTER_AUTH_SECRET=your-secret-key-that-is-at-least-32-characters-long

# Better-Auth base URL (your application URL)
BETTER_AUTH_URL=http://localhost:3000

# Two-Factor Authentication
TWO_FACTOR_ENABLED=false
TWO_FACTOR_APP_NAME=MyApp

# Passkey/WebAuthn
PASSKEY_ENABLED=false
PASSKEY_RP_ID=localhost
PASSKEY_RP_NAME=MyApp

# Social Login - Google
SOCIAL_GOOGLE_CLIENT_ID=your-google-client-id
SOCIAL_GOOGLE_CLIENT_SECRET=your-google-client-secret

# Social Login - GitHub
SOCIAL_GITHUB_CLIENT_ID=your-github-client-id
SOCIAL_GITHUB_CLIENT_SECRET=your-github-client-secret

# Social Login - Apple
SOCIAL_APPLE_CLIENT_ID=your-apple-client-id
SOCIAL_APPLE_CLIENT_SECRET=your-apple-client-secret

# Rate Limiting for Better-Auth endpoints
RATE_LIMIT_ENABLED=true
RATE_LIMIT_MAX=10
RATE_LIMIT_WINDOW_SECONDS=60
RATE_LIMIT_MESSAGE="Too many requests, please try again later."

# =============================================================================
# System Setup - Initial Admin (for automated deployments)
# =============================================================================
# Auto-creates the initial admin user on server start when zero users exist.
# Only takes effect on fresh deployments. Remove after first deployment.
# IMPORTANT: Use strong passwords and remove credentials from ENV after setup!
NSC__systemSetup__initialAdmin__email=admin@example.com
NSC__systemSetup__initialAdmin__password=YourSecurePassword123!
# NSC__systemSetup__initialAdmin__name=Admin