# Database — Supabase PostgreSQL
DATABASE_URL=

# Supabase Storage & Services
SUPABASE_URL=
# Service role key (required on server/backend for admin storage operations bypassing RLS)
SUPABASE_SERVICE_ROLE_KEY=
# Anon key (for public client-side access or user-scoped RLS operations)
SUPABASE_ANON_KEY=
# NEXT_PUBLIC_SUPABASE_ANON_KEY=

# Upstash Redis
UPSTASH_REDIS_REST_URL=
UPSTASH_REDIS_REST_TOKEN=

# Composio — external app integrations
COMPOSIO_API_KEY=

# Trigger.dev — background task execution
TRIGGER_SECRET_KEY=
TRIGGER_PROJECT_REF=

# Better Auth — authentication
BETTER_AUTH_SECRET=
BETTER_AUTH_URL=http://localhost:3001

# API server
PORT=3001

# Web app — public, safe for browser
NEXT_PUBLIC_API_URL=http://localhost:3001

# Web Push Notifications (VAPID)
VAPID_SUBJECT=mailto:admin@openbots.dev
NEXT_PUBLIC_VAPID_PUBLIC_KEY=
VAPID_PRIVATE_KEY=

# Daytona — Cloud Isolated Desktop & Sandboxes
DAYTONA_API_KEY=
DAYTONA_API_URL=https://app.daytona.io/api