.env.production

# TPEN Services - Production Environment Template
# DO NOT commit actual production secrets to this file
# This file extends config.env with production-specific overrides
# In production, set these via GitHub Secrets, environment variables, or secret management

# ============================================================================
# ENVIRONMENT-SPECIFIC SETTINGS
# ALL of these MUST be set for production deployments
# ============================================================================

# Server Configuration
SERVERURL=https://api.t-pen.org
PORT=3011
DOWN=false

# ============================================================================
# DATABASE CONFIGURATION (REQUIRED)
# ============================================================================

# Production MongoDB
MONGODB=mongodb://prod-mongo-host:27017/
MONGODBNAME=tpen

# Production MariaDB
MARIADB=prod-maria-host
MARIADBNAME=tpen
MARIADBUSER=tpen_prod_user
MARIADBPASSWORD=REPLACE_WITH_SECRET

# ============================================================================
# EXTERNAL SERVICES
# ============================================================================

# Production RERUM Store
RERUMIDPREFIX=https://store.rerum.io/v1/id/

# Production TinyPEN
TINYPEN=https://tiny.t-pen.org/

# TPEN Interfaces URL
TPENINTERFACES=https://app.t-pen.org/
TPENINTERFACESNAMESPACE=https://app.t-pen.org/

# ============================================================================
# STATIC STORAGE (GitHub) (REQUIRED)
# ============================================================================

REPO_NAME=TPEN-static
TPENSTATIC=https://{organization}.github.io/static/

# CRITICAL: Use GitHub Secrets for this token in production
# Needs: repo scope
GITHUB_TOKEN=REPLACE_WITH_SECRET

# ============================================================================
# AUTHENTICATION (Auth0) (REQUIRED)
# ============================================================================

# Production Auth0 configuration
AUDIENCE=https://api.t-pen.org
DOMAIN=REPLACE_WITH_PROD_TENANT.auth0.com

# ============================================================================
# EMAIL CONFIGURATION (REQUIRED)
# ============================================================================

SMTP_HOST=smtp.production.com
SMTP_PORT=587
TPEN_SUPPORT_EMAIL=support@t-pen.org
TPEN_EMAIL_CC=admin@t-pen.org

# ============================================================================
# PRODUCTION NOTES
# ============================================================================
# 
# CORS Policy:
# - API is open to all origins by default
# - No origin restrictions for public API access
#
# Secret Management:
# - Use GitHub Secrets for CI/CD deployments
# - Use environment variables in container/VM deployments
# - Never commit actual secrets to this file
# - Rotate secrets regularly
#
# Monitoring:
# - Enable logging and monitoring in production
# - Set up alerts for DOWN=true
# - Monitor database connections
#
# Security:
# - Use HTTPS for all endpoints
# - Regularly update dependencies
# - Consider rate limiting for production if needed