# cPanel Node.js environment variables
# Add these in cPanel's Node.js app environment settings.
# Do not upload .env or .env.local with real secrets.

NODE_ENV=production
PORT=3000
NEXT_PUBLIC_APP_URL=https://yourdomain.com
# Only set this when deploying under a sub-folder, for example /dev-test.
NEXT_PUBLIC_BASE_PATH=
NEXT_PUBLIC_WHATSAPP_URL=https://wa.me/91XXXXXXXXXX

# Required for auth cookies/JWT. Must be 32+ characters.
JWT_SECRET=replace_with_a_random_32_plus_character_secret

# MySQL. Use either DATABASE_URL or the MYSQL_* fields below.
DATABASE_URL=mysql://db_user:db_password@localhost:3306/db_name
MYSQL_HOST=localhost
MYSQL_PORT=3306
MYSQL_USER=db_user
MYSQL_PASSWORD=db_password
MYSQL_DATABASE=db_name
MYSQL_CONNECTION_LIMIT=10

# Razorpay. Prefer mode-specific live keys for production.
RAZORPAY_MODE=live
RAZORPAY_LIVE_KEY_ID=rzp_live_xxxxxxxxxxxxx
RAZORPAY_LIVE_KEY_SECRET=replace_with_live_secret
RAZORPAY_LIVE_WEBHOOK_SECRET=replace_with_webhook_secret

# Legacy Razorpay names are also supported by the app if you prefer them.
# RAZORPAY_KEY_ID=rzp_live_xxxxxxxxxxxxx
# RAZORPAY_KEY_SECRET=replace_with_live_secret
# RAZORPAY_WEBHOOK_SECRET=replace_with_webhook_secret

# Google OAuth. Required only if Google login is enabled.
GOOGLE_CLIENT_ID=replace_with_google_client_id
GOOGLE_CLIENT_SECRET=replace_with_google_client_secret

# Email integrations are optional. Use one or both if configured.
RESEND_API_KEY=replace_with_resend_api_key
EMAIL_FROM=Big Body Boyz <noreply@yourdomain.com>
EMAIL_WEBHOOK_URL=https://your-email-webhook.example.com

# Development-only flag. Keep false or unset in production.
NEXT_PUBLIC_ENABLE_DEV_EDITOR=false