# Better Auth Configuration
BETTER_AUTH_SECRET="your-secret-key-here-change-in-production"
BETTER_AUTH_URL="http://localhost:3000"
NEXT_PUBLIC_BETTER_AUTH_URL="http://localhost:3000"

# Turso Database Configuration (libSQL)
# For local development: file:local.db
# For production Turso: libsql://[your-db].turso.io
TURSO_DATABASE_URL="libsql://your-db-name.turso.io"
TURSO_AUTH_TOKEN="your-turso-auth-token"

# VedGupta SSO Configuration (OAuth 2.1 / OIDC)
SSO_BASE_URL="https://sso.vedgupta.in"
SSO_CLIENT_ID="resume-builder-app"
SSO_CLIENT_SECRET=""

# Cloudflare R2 Private Storage Configuration (S3 API Compatible)
# Do NOT commit production credentials; deploy with `wrangler secret put`
R2_ACCOUNT_ID="your-cloudflare-account-id"
R2_ACCESS_KEY_ID="your-r2-access-key-id"
R2_SECRET_ACCESS_KEY="your-r2-secret-access-key"
R2_BUCKET="resume-builder-private"

# Google Gemini AI Configuration
# Deploy with `wrangler secret put GEMINI_API_KEY`
GEMINI_API_KEY="your-gemini-api-key"

# Knowledge Agent Internal Authentication Secret
INTERNAL_SERVICE_KEY="your-internal-service-key-change-in-production"