.env.example

# ─── Prisma / Database ────────────────────────────────────────────────────────
# Transaction pooler (port 6543) — used at runtime
DATABASE_URL="postgresql://postgres.<project-ref>:<password>@aws-0-<region>.pooler.supabase.com:6543/postgres?pgbouncer=true"

# Direct connection (port 5432) — used for migrations only
DIRECT_URL="postgresql://postgres.<project-ref>:<password>@aws-0-<region>.pooler.supabase.com:5432/postgres"

# ─── Supabase (public — safe to expose to the browser) ────────────────────────
NEXT_PUBLIC_SUPABASE_URL="https://<project-ref>.supabase.co"
NEXT_PUBLIC_SUPABASE_ANON_KEY="<anon-key>"

# ─── Supabase (server-side only — NEVER use NEXT_PUBLIC_ prefix) ──────────────
# Used exclusively in app/api/admin/login to bypass RLS.
# Never log or expose this value.
SUPABASE_SERVICE_ROLE_KEY="<service-role-key>"

# ─── App URL ──────────────────────────────────────────────────────────────────
# The canonical public URL of this deployment (no trailing slash).
# Used as the CORS allowed origin in production when ALLOWED_ORIGIN is not set.
NEXT_PUBLIC_APP_URL="https://your-domain.vercel.app"

# ─── CORS (optional override) ─────────────────────────────────────────────────
# Override the allowed CORS origin. Defaults to NEXT_PUBLIC_APP_URL in
# production, or "*" in development. Useful for preview deployments.
# ALLOWED_ORIGIN="https://preview-branch.vercel.app"

# ─── Admin credentials (server-side only) ─────────────────────────────────────
# Plain-text values are compared against SHA-256 hashes stored in admin_profiles.
# To generate a hash: node -e "const {createHash}=require('crypto'); console.log(createHash('sha256').update('YOUR_PASSWORD').digest('hex'))"
ADMIN_USERNAME=admin1
ADMIN_PASSWORD=changeme

# ─── LINE LIFF (optional) ─────────────────────────────────────────────────────
# Required only if LINE Login / LIFF is enabled.
# NEXT_PUBLIC_LIFF_ID="<liff-id>"