.env.example

# ── Database ──
DATABASE_URL=postgresql://user:pass@host/db?sslmode=require

# ── Auth ──
AUTH_SECRET=generate-with-openssl-rand-base64-32

# ── Email (Resend) ──
RESEND_API_KEY=re_xxxxxxxxxxxx

# ── AI (HackClub) ──
HACKCLUB_AI_API_KEY=hackclub-ai-key
HACKCLUB_WEB_SEARCH_API_KEY=hackclub-search-key

# ── Memory (Supermemory v4) ──
SUPERMEMORY_API_KEY=sm-key

# ── Rate Limiting (Upstash Redis) ──
# Required in production — without these, rate limiting falls back to
# per-process in-memory store which is NOT safe on multi-instance deployments.
# Create a free Redis DB at https://console.upstash.com/
KV_REST_API_URL=https://your-redis.upstash.io
KV_REST_API_TOKEN=your-upstash-redis-token

# ── App URL ──
# Used in password-reset emails and login notifications.
# Set to your production domain (e.g. https://luna.a3ro.dev)
NEXT_PUBLIC_APP_URL=https://luna-tracker.a3ro.dev

# ── Admin ──
# Email address that receives subscription notifications.
ADMIN_EMAIL=[EMAIL_ADDRESS]

# ── Cron ──
# Secret for the image cleanup cron endpoint (/api/cron/cleanup-images).
# Generate with: openssl rand -base64 32
CRON_SECRET=generate-with-openssl-rand-base64-32