.env.example

# Firebase Client SDK
NEXT_PUBLIC_FIREBASE_API_KEY=
NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN=
NEXT_PUBLIC_FIREBASE_PROJECT_ID=
NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET=
NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID=
NEXT_PUBLIC_FIREBASE_APP_ID=

# Firebase Admin SDK — Server-side only
# Generate from: Firebase Console → Project Settings → Service Accounts → Generate New Private Key
# Paste the entire JSON as a single-line string
FIREBASE_SERVICE_ACCOUNT_KEY=

# JWT Session Secret
# Generate with: openssl rand -base64 32
JWT_SECRET=

# Admin emails (comma-separated) for admin panel access
ADMIN_EMAILS=admin@dfriendsclub.in

# Brevo Email API (Student OTP verification)
# Get your API key from: brevo.com → Settings → SMTP & API → API Keys
BREVO_API_KEY=
BREVO_SENDER_EMAIL=

# Brevo Multi-key round-robin (optional — for higher email volume)
# Format: apikey:sender@email.com,apikey2:sender2@email.com
# Each free Brevo account allows 300 emails/day
# BREVO_KEYS=

# Origin allowlist for all API endpoints (comma-separated)
# Only these domains can call /api/* routes — blocks abuse from external sites
# Defaults to localhost + idealab.dfriendsclub.in if not set
# ALLOWED_ORIGINS=https://idealab.dfriendsclub.in,http://localhost:3000