# Postgres (consumed by docker-compose)
POSTGRES_USER=chelaa
POSTGRES_PASSWORD=chelaa
POSTGRES_DB=chelaa
POSTGRES_PORT=5432

# Go API
# Demo users + fake posts + the shared dev password (chelaa123).
# MUST stay unset in production.
SEED_DEMO=1
DATABASE_URL=postgres://chelaa:chelaa@localhost:5432/chelaa?sslmode=disable
PORT=4120
CORS_ORIGIN=http://localhost:4100
# Shared parent domain for the session cookie so web (www.) and api (api.)
# subdomains both see it. Leave empty for local dev (host-only cookie).
COOKIE_DOMAIN=

# Next.js
NEXT_PUBLIC_API_URL=http://localhost:4120

# Public base URL of the API itself. Upload URLs are absolute and stored
# forever, so when R2 is NOT used this host gets baked into every avatar/CV/
# post image. Leave empty in dev; in production set R2_* or this, or the API
# refuses to start rather than saving http://localhost URLs.
PUBLIC_API_URL=

# Cloudflare R2 (image uploads) — leave empty to use local disk in dev
R2_ACCOUNT_ID=
R2_ACCESS_KEY_ID=
R2_SECRET_ACCESS_KEY=
R2_BUCKET=
R2_PUBLIC_URL=

# Email (password resets + activity notifications).
# Without RESEND_API_KEY the API logs messages instead of sending them.
RESEND_API_KEY=
MAIL_FROM=Chelaa <noreply@chelaa.tech>
APP_URL=http://localhost:4100

# Groq — powers the daily Chelaa Bot post suggestions (admin review queue).
GROQ_API_KEY=
GROQ_MODEL=llama-3.3-70b-versatile