# ====================
# N3tHawk Store Environment Configuration
# ====================

# Application Environment
NODE_ENV=production
FRONTEND_URL=http://localhost:3000
CORS_ORIGIN=http://localhost:3000

# Database Configuration
POSTGRES_DB=n3thawk_store
POSTGRES_USER=n3thawk
POSTGRES_PASSWORD=your_secure_postgres_password_here
POSTGRES_PORT=5432
DATABASE_URL=postgresql://n3thawk:your_secure_postgres_password_here@localhost:5432/n3thawk_store

# Redis Configuration
REDIS_PASSWORD=your_secure_redis_password_here
REDIS_PORT=6379
REDIS_URL=redis://:your_secure_redis_password_here@localhost:6379

# JWT Configuration
JWT_SECRET=your_super_secure_jwt_secret_key_minimum_32_characters
JWT_EXPIRE_TIME=24h
REFRESH_TOKEN_EXPIRE_TIME=7d

# Password Hashing
BCRYPT_ROUNDS=12

# Email Configuration (SMTP)
EMAIL_HOST=smtp.gmail.com
EMAIL_PORT=587
EMAIL_USER=your_email@gmail.com
EMAIL_PASS=your_app_specific_password
EMAIL_FROM=noreply@n3thawkstore.com

# Stripe Payment Configuration
STRIPE_SECRET_KEY=sk_test_your_stripe_secret_key_here
STRIPE_PUBLISHABLE_KEY=pk_test_your_stripe_publishable_key_here
STRIPE_WEBHOOK_SECRET=whsec_your_webhook_secret_here

# Frontend Environment Variables
VITE_API_URL=http://localhost:5000/api
VITE_STRIPE_PUBLISHABLE_KEY=pk_test_your_stripe_publishable_key_here
VITE_WEBSOCKET_URL=http://localhost:5000

# Server Ports
BACKEND_PORT=5000
FRONTEND_PORT=3000
NGINX_HTTP_PORT=80
NGINX_HTTPS_PORT=443

# Production SSL Configuration (for deployment)
DOMAIN_NAME=yourdomain.com
SSL_EMAIL=admin@yourdomain.com

# ====================
# Security Notes:
# ====================
# 1. Generate strong, unique passwords for all services
# 2. Use environment-specific values for each deployment
# 3. Never commit actual secrets to version control
# 4. Use secure key management in production (AWS Secrets Manager, etc.)
# 5. Rotate secrets regularly
# 6. Enable proper firewall rules and network security

# ====================
# Development vs Production:
# ====================
# Development:
# - Use .env.development for local development
# - Database and Redis can run locally or in Docker
# - Use Stripe test keys
# - Email can use test SMTP or services like Mailtrap

# Production:
# - Use .env.production for production deployment
# - Use managed database services (AWS RDS, etc.)
# - Use production Stripe keys
# - Use production email service (SendGrid, AWS SES, etc.)
# - Enable SSL/TLS with proper certificates
# - Use load balancers and CDN for scaling

# ====================
# Required External Services:
# ====================
# 1. PostgreSQL Database (local or cloud)
# 2. Redis Cache (local or cloud)
# 3. SMTP Email Service (Gmail, SendGrid, AWS SES, etc.)
# 4. Stripe Account (for payment processing)
# 5. Domain Name (for production deployment)
# 6. SSL Certificate (Let's Encrypt or commercial)