.env.example

# Optional RU controls for the resumable impact snapshot job.
IMPACT_HISTORY_CONCURRENCY=8
IMPACT_HISTORY_BATCH_SIZE=500
# Azure Timer Function setting; use your deployed application's URL.
IMPACT_HISTORY_URL=https://www.devglobe.dev/api/cron/impact-history
# GitHub API and nomination enrichment
# Required for dataset scripts and complete self-nomination details.
# Create at: https://github.com/settings/tokens
# Classic token scopes: read:user, read:org
GITHUB_TOKEN=ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

# Azure Cosmos DB
# Required in production and for nomination/review scripts.
COSMOS_ENDPOINT=https://your-account.documents.azure.com:443/
COSMOS_KEY=your_cosmos_primary_or_secondary_key
COSMOS_DATABASE=devglobe
COSMOS_CONTAINER=developers
COSMOS_ACTIVITY_CONTAINER=activities
COSMOS_CONTACTS_CONTAINER=developer-contacts
COSMOS_ENGAGEMENT_CONTAINER=engagement-events
COSMOS_CONTRIBUTION_STATE_CONTAINER=contribution-opportunity-state
COSMOS_LIVE_PRESENCE_CONTAINER=live-presence
COSMOS_CODING_STATS_CONTAINER=coding-stats
# HMACs browser session IDs before storage; SESSION_SECRET is used when omitted.
ENGAGEMENT_HASH_SECRET=your_random_engagement_hash_secret
# Logs allow-listed events in the browser during local analytics verification.
NEXT_PUBLIC_ANALYTICS_DEBUG=false

# Protects the server-to-server global activity collector endpoint.
# Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
ACTIVITY_INGEST_SECRET=your_random_activity_ingest_secret

# Azure Timer Function setting; use your deployed application's URL.
ACTIVITY_INGEST_URL=https://www.devglobe.dev/api/activities/ingest

# Azure OpenAI search and generated card fun facts (optional)
AZURE_OPENAI_ENDPOINT=https://your-resource.openai.azure.com
AZURE_OPENAI_KEY=your_azure_openai_key
EMBEDDING_DEPLOYMENT=text-embedding-3-small
AZURE_OPENAI_CHAT_DEPLOYMENT=gpt-4o-mini

# Stack Overflow API (optional; increases the request limit)
# Register at: https://stackapps.com/apps/oauth/register
SO_API_KEY=your_stackoverflow_api_key

# OpenCage geocoding (optional; OpenStreetMap is the fallback)
# Register at: https://opencagedata.com/api
GEOCODE_API_KEY=your_opencage_api_key

# GitHub OAuth for sign-in and profile claiming
# Create at: https://github.com/settings/developers -> OAuth Apps
GITHUB_CLIENT_ID=your_github_oauth_client_id
GITHUB_CLIENT_SECRET=your_github_oauth_client_secret

# Session cookie signing secret (required in production)
# Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
SESSION_SECRET=your_random_session_secret

# Transactional lifecycle emails (optional; Resend free tier)
# EMAIL_FROM must use a sender/domain verified in Resend.
RESEND_API_KEY=re_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
EMAIL_FROM=DevGlobe <hello@your-verified-domain.example>
# Protects scheduled endpoints; configure the same value in Container Apps and Azure Functions.
CRON_SECRET=your_random_cron_secret
# Optional; defaults to CRON_SECRET. Rotating it starts a new delivery-deduplication namespace.
EMAIL_DELIVERY_HASH_SECRET=your_random_email_delivery_hash_secret
# Signs one-click unsubscribe links; SESSION_SECRET is used when omitted.
EMAIL_PREFERENCE_SECRET=your_random_email_preference_secret

# Canonical public URL for metadata, cards, robots, sitemap, and share links.
# Include the https:// protocol and do not wrap the value in quotes.
NEXT_PUBLIC_SITE_URL=https://www.devglobe.dev

# Public read API and static developer snapshot hosted directly on Azure.
# Leave unset to use the same-origin Next.js API during local development.
NEXT_PUBLIC_API_URL=https://devglobe-public-api.azurewebsites.net
NEXT_PUBLIC_DEVELOPER_SNAPSHOT_URL=https://devglobeactivityfn.z13.web.core.windows.net/developers.json