.env.example

# ---- Hiyvaru environment ----
# Copy to .env and fill in. All secrets live here; nothing is hardcoded.

# Database. Leave empty in local dev to use embedded PGlite (./.data/pglite).
# Production: postgres://user:pass@host:5432/hiyvaru
DATABASE_URL=

# Redis (BullMQ matching queue, alerts, cleanup jobs).
# Leave empty in local dev to use the in-process queue driver.
REDIS_URL=

# Twilio (SMS OTP + moderator crisis alerts).
# Leave TWILIO_ACCOUNT_SID empty to run in MOCK mode: SMS bodies are logged to
# the console and written to .data/outbox.jsonl instead of being sent.
TWILIO_ACCOUNT_SID=
TWILIO_AUTH_TOKEN=
TWILIO_FROM_NUMBER=

# Phone number(s) of duty moderators for crisis SMS alerts, comma-separated.
DUTY_MODERATOR_PHONES=

# SAFETY (founder decision 2026-07-25): the Maldives Police Service number that
# receives an automated life-safety referral (member contact) on a confirmed
# crisis escalation. Use the coordination number agreed with Police, NOT the
# public 119 line. Leave empty to disable dispatch (logged instead).
POLICE_ALERT_PHONE=

# 32-byte hex key that encrypts the RECOVERABLE member phone number, decrypted
# only for a police life-safety referral. Separate from message/ID-doc keys.
# node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
CONTACT_MASTER_KEY=

# 32-byte hex key that wraps per-conversation message keys (AES-256).
# Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
MESSAGE_MASTER_KEY=

# 32-byte hex key for ID-document encryption at rest (separate from messages).
ID_DOC_MASTER_KEY=

# Secret used to HMAC phone numbers before storing (phone_hash).
PHONE_HASH_SECRET=

# Sentry (leave empty to disable entirely)
SENTRY_DSN=

# Base URL of the deployment (used in links)
APP_BASE_URL=http://localhost:3000

# Web push VAPID keys (Phase D). Generate with: npx web-push generate-vapid-keys
NEXT_PUBLIC_VAPID_PUBLIC_KEY=
VAPID_PRIVATE_KEY=