# PostgreSQL connection string
DATABASE_URL=postgresql://user:password@localhost:5432/hermes_hub

# 32-byte hex key for AES-256 credential encryption
# Generate one with: openssl rand -hex 32
ENCRYPTION_KEY=

# Optional second key for ENCRYPTION_KEY rotation — when set, new writes use v2 and bun run re-encrypt rewrites stale rows
ENCRYPTION_KEY_V2=

# Secret for Better Auth session signing
BETTER_AUTH_SECRET=

# Public URL of the app (used for magic link emails in production)
# In development, this is usually http://localhost:3000
BETTER_AUTH_URL=http://localhost:3000

# DeepSeek API key (required when using the DeepSeek provider)
# Apply at https://platform.deepseek.com/api_keys
# DEEPSEEK_API_KEY=

# Command Code API key (required when using the Command Code provider or Coding Plan subscription)
# Subscribe at https://commandcode.ai/pricing and create a key at https://commandcode.ai/studio/
# COMMANDCODE_API_KEY=
# COMMANDCODE_BASE_URL=https://api.commandcode.ai/provider/v1