Backend/.env.production at main · Neurowealth/Backend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
```env
# ============================================================
# Application Configuration
# ============================================================

# Application environment.
# Enables production-specific behavior and optimizations.
NODE_ENV=production

# Port on which the backend API listens.
PORT=3000


# ============================================================
# CORS Configuration
# ============================================================

# Comma-separated list of frontend origins allowed to access
# the backend API from a browser.
CORS_ALLOWED_ORIGINS=https://app.neurowealth.io,https://admin.neurowealth.io

# Maximum amount of time (in seconds) that browsers may cache
# CORS preflight responses.
CORS_MAX_AGE=7200

# Allows the browser to include credentials such as cookies
# and authorization headers in cross-origin requests.
CORS_ALLOW_CREDENTIALS=true


# ============================================================
# Database Configuration
# ============================================================

# PostgreSQL connection URL for the production database.
# IMPORTANT: Replace this with the actual production database
# credentials and keep the value secret.
DATABASE_URL=postgresql://prod_user:prod_password@prod-db.example.com:5432/neuro_backend_prod

# Production PostgreSQL database host.
DB_HOST=prod-db.example.com

# PostgreSQL database port.
DB_PORT=5432

# PostgreSQL database username.
DB_USER=prod_user

# PostgreSQL database password.
# IMPORTANT: This is a production secret and should not be
# committed to source control.
DB_PASSWORD=prod_password

# Name of the production PostgreSQL database.
DB_NAME=neuro_backend_prod


# ============================================================
# JWT / Authentication Configuration
# ============================================================

# Secret used to sign and verify access JWTs.
# IMPORTANT: Use a strong, randomly generated secret in production.
# Never commit the real value to source control.
JWT_SECRET=your-production-jwt-secret-key

# Lifetime of an access JWT.
JWT_EXPIRY=24h

# Secret used to sign and verify refresh tokens.
# IMPORTANT: Use a separate strong secret from JWT_SECRET.
REFRESH_TOKEN_SECRET=your-production-refresh-secret


# ============================================================
# AI / External API Configuration
# ============================================================

# Anthropic API key used by the backend for AI functionality.
# IMPORTANT: Store the real production key securely.
# ANTHROPIC_API_KEY=get_from_console.anthropic.com

# Brian API key for blockchain/AI-related integrations.
# Obtain the key from the Brian platform when required.
# BRIAN_API_KEY=get_from_brianknows.org

# Production Anthropic API key.
# IMPORTANT: Replace the placeholder with the real secret
# and never commit it to source control.
ANTHROPIC_API_KEY=sk-your-prod-anthropic-key

# Production OpenAI API key.
# IMPORTANT: Replace the placeholder with the real secret
# and never commit it to source control.
OPENAI_API_KEY=sk-your-prod-openai-key


# ============================================================
# Logging Configuration
# ============================================================

# Logging level for the production environment.
# "warn" reduces noisy informational logs while retaining
# warnings and errors.
LOG_LEVEL=warn

# Log output format.
# JSON is suitable for production log aggregation and
# monitoring systems.
LOG_FORMAT=json


# ============================================================
# HTTP / Server Configuration
# ============================================================

# Maximum amount of time the server will wait for an HTTP
# request before timing out, in milliseconds.
SERVER_TIMEOUT=30000

# Maximum size allowed for incoming HTTP request bodies.
MAX_REQUEST_SIZE=10mb
```