PUBLIC_SUPABASE_URL=https://your-project.supabase.co
PUBLIC_SUPABASE_ANON_KEY=your-anon-key

# Only needed for running sync-models locally or deploying Edge Functions
SUPABASE_SERVICE_ROLE_KEY=your-service-role-key

# Direct Postgres connection string — used for pg_dump backup export
# Find it in Supabase Dashboard > Project Settings > Database > Connection string (URI)
# Format: postgresql://postgres:[PASSWORD]@db.[PROJECT_REF].supabase.co:5432/postgres
DATABASE_URL=postgresql://postgres:[PASSWORD]@db.[PROJECT_REF].supabase.co:5432/postgres

# Cloudflare Turnstile site key — public, used to render the widget on /login.
# The matching secret key lives in Supabase Dashboard → Authentication → Settings →
# Bot and Abuse Protection (Supabase calls siteverify for us, so our app never sees the secret).
# Create a site at https://dash.cloudflare.com/?to=/:account/turnstile
# Local dev can use the always-passing test site key: 1x00000000000000000000AA
PUBLIC_TURNSTILE_SITE_KEY=your-turnstile-site-key