env.example

# Shared/public build: payment and bot modules are removed.
# Use this example for local testing. In the full (private) build, keep real secrets out of version control.

# Database Configuration
MONGODB_URI=mongodb://localhost:27017/your_db_name

# Supabase Configuration (for auth/storage if used)
SUPABASE_URL=your_supabase_url_here
SUPABASE_ANON_KEY=your_supabase_anon_key_here
SUPABASE_SERVICE_ROLE_KEY=your_supabase_service_role_key_here

# Server Configuration
PORT=3001
NODE_ENV=development

# Frontend URLs (for CORS)
FRONTEND_URL=http://localhost:3000
ADMIN_FRONTEND_URL=http://localhost:3002
ALLOWED_ORIGINS=

# Rate Limiting
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=1000
AUTH_RATE_LIMIT_WINDOW_MS=900000
AUTH_RATE_LIMIT_MAX_REQUESTS=100

# Legacy Privy (if used)
PRIVY_APP_ID=your_privy_app_id
PRIVY_APP_SECRET=your_privy_app_secret

# Solana (for wallet features). In full build: keep TREASURY private key secret.
NETWORK=devnet
TREASURY=

# Offline Mode (for development)
OFFLINE=false

# Payment and bot modules are not included in this shared build.
# (CRYPTOPAY_*, NOWPAYMENTS_*, bot-related keys are omitted.)

# EmailJS (for OTP and emails)
EMAILJS_SERVICE_ID=your_emailjs_service_id
EMAILJS_PUBLIC_KEY=your_emailjs_public_key
EMAILJS_PRIVATE_KEY=your_emailjs_private_key
EMAILJS_OTP_TEMPLATE_ID=your_otp_template_id
EMAILJS_VERIFICATION_TEMPLATE_ID=your_verification_template_id
EMAILJS_WELCOME_TEMPLATE_ID=your_welcome_template_id
APP_NAME=SpinX

# Admin Bootstrap (for creating first admin). In full build: use a strong random token and keep secret.
ADMIN_BOOTSTRAP_TOKEN=change_me_to_a_strong_random_token
ADMIN_EMAIL=admin@example.com
ADMIN_USERNAME=admin
ADMIN_DISPLAY_NAME=Admin

# WebSocket (optional)
# WS_HEARTBEAT_INTERVAL=25000
# WS_HEARTBEAT_TIMEOUT=60000