-
Notifications
You must be signed in to change notification settings - Fork 4
Expand file tree
/
Copy path.env.example
More file actions
128 lines (110 loc) · 5.17 KB
/
Copy path.env.example
File metadata and controls
128 lines (110 loc) · 5.17 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
# =============================================================================
# DATABASE CONFIGURATION (Drizzle-ORM + PostgreSQL)
# =============================================================================
# Database connection string
# Format: postgresql://[username]:[password]@[host]:[port]/[database_name]
# Example: postgresql://user:password@localhost:5432/nomad_db
DATABASE_URL=
# Database SSL configuration (optional)
# Controls whether to use SSL for database connections
# Valid values: "true", "false", "enabled", "disabled"
#
# Priority order:
# 1. Explicit DATABASE_SSL value (if set)
# 2. Auto-detect from DATABASE_URL sslmode parameter
# 3. Default based on NODE_ENV (production = true, others = false)
#
# Examples:
# DATABASE_SSL=false # Disable SSL (useful for local development)
# DATABASE_SSL=true # Force SSL (useful for production)
#
# Note: Leave empty to use auto-detection or default behavior
DATABASE_SSL=
# =============================================================================
# LOGGING CONFIGURATION (Pino Logger)
# =============================================================================
# Override the default log level for the application
# Valid values: "fatal", "error", "warn", "info", "debug", "trace", "silent"
#
# Default behavior when LOG_LEVEL is not set:
# - Test environment: "silent" (no logs during tests)
# - Development: "debug" (detailed logging for debugging)
# - Production: "info" (essential logs only)
#
# Examples:
# LOG_LEVEL=debug # Show all logs including debug messages
# LOG_LEVEL=info # Show info, warn, error, and fatal logs
# LOG_LEVEL=error # Show only error and fatal logs
# LOG_LEVEL=silent # Disable all logging
LOG_LEVEL=
# =============================================================================
# SMS SERVICE CONFIGURATION (Aliyun SMS)
# =============================================================================
# Enable or disable Aliyun SMS service
# Set to "enabled" or "true" to enable SMS service
# Set to "disabled" or "false" to disable SMS service
# If not set, defaults to enabled in production and disabled in development
# Valid values: "enabled", "disabled", "true", "false"
ENABLE_ALIYUN_SMS=
# Aliyun SMS credentials
# These credentials are required for Aliyun SMS service authentication
# Obtain them from Aliyun console: https://ram.console.aliyun.com/manage/ak
#
# IMPORTANT SECURITY NOTES:
# - Keep these credentials secure and never commit them to version control
# - Use RAM (Resource Access Management) to create dedicated SMS service credentials
# - Grant only necessary SMS permissions to minimize security risks
#
# The Aliyun SDK will automatically detect these credentials from environment variables
ALIBABA_CLOUD_ACCESS_KEY_ID=
ALIBABA_CLOUD_ACCESS_KEY_SECRET=
# Aliyun SMS sign name (短信签名名称)
# This is the signature that appears in SMS messages
# Example: "YourAppName" or "Your Company"
ALIBABA_CLOUD_SMS_SIGN_NAME=
# Aliyun SMS template code (短信模板代码)
# The template code for verification SMS, obtained from Aliyun SMS console
# Example: "SMS_123456789"
ALIBABA_CLOUD_SMS_TEMPLATE_CODE=
# =============================================================================
# EMAIL SERVICE CONFIGURATION (Resend)
# =============================================================================
# Enable or disable Resend email service
# Set to "enabled" or "true" to enable email service
# Set to "disabled" or "false" to disable email service
# If not set, defaults to enabled in production and disabled in development
# Valid values: "enabled", "disabled", "true", "false"
ENABLE_RESEND=
# Resend API Key
# Obtain your API key from: https://resend.com/api-keys
#
# IMPORTANT SECURITY NOTES:
# - Keep this API key secure and never commit it to version control
# - Use environment-specific API keys (separate keys for dev/staging/production)
# - Resend provides a test mode for development
RESEND_API_KEY=
# From email address for sending emails
# This must be a verified domain in your Resend account
# For development/testing, you can use: onboarding@resend.dev
# For production, use your own domain: noreply@yourdomain.com
RESEND_FROM_EMAIL=onboarding@resend.dev
# =============================================================================
# AUTHENTICATION CONFIGURATION (Better Auth)
# =============================================================================
# Secret key for encryption and generating hashes
# Generate a random value using: openssl rand -hex 32
# Keep this secret and never commit it to version control
BETTER_AUTH_SECRET=
# Base URL of your application
# In development: http://localhost:3000
# In production: your actual domain (e.g., https://yourdomain.com)
BETTER_AUTH_URL=http://localhost:3000
# Social Sign-On IDs and Secrets
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
# Cloudflare Turnstile configuration
# The site key is exposed to the browser (NEXT_PUBLIC_ prefix) while the secret key
# stays on the server. For local development you can keep the default Cloudflare
# test values; production environments MUST override both values with real keys.
NEXT_PUBLIC_TURNSTILE_SITE_KEY=1x00000000000000000000AA
TURNSTILE_SECRET_KEY=1x0000000000000000000000000000000AA