.env.example

# FinTrack Web — environment template.
# Copy to .env and fill in your values.
#
# Where does a new var go?
#   REQUIRED  every env; app won't work correctly without it (URL vars: always set,
#             just a different value per env — local / preview / prod)
#   OPTIONAL  safe default; feature stays off until set
# Adding a var with a localhost default that needs a real value in prod? Add a
# "REQUIRED IN PRODUCTION" section — see apps/api/.env.example.

# ═════════════════════════════════════════════════════════════
#  REQUIRED  —  all environments; app won't work correctly without these
# ═════════════════════════════════════════════════════════════

# Public URLs — browser-facing values for local (non-Docker) runs. In Docker
# the API URL and Telegram bot id are injected by compose — environment for
# dev, build args for prod (see compose.dev.yaml / compose.yaml).
NEXT_PUBLIC_API_URL="http://localhost:8000/api"
NEXT_PUBLIC_SITE_ORIGIN="http://localhost:5173"

# Auth (NextAuth)
NEXTAUTH_URL="http://localhost:5173/FinTrack/api/auth"
# node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
NEXTAUTH_SECRET="<32-byte-hex>"

# Auth providers
GOOGLE_CLIENT_ID="your_google_client_id.apps.googleusercontent.com" # must match Google Cloud OAuth client
GOOGLE_CLIENT_SECRET="your_google_client_secret"
# Telegram Login Widget — numeric bot id, digits before the ":" in the bot
# token (e.g. 123456789:ABC -> 123456789).
NEXT_PUBLIC_TELEGRAM_BOT_ID="your_numeric_bot_id"

# ═════════════════════════════════════════════════════════════
#  OPTIONAL  —  safe defaults; features stay off until configured
# ═════════════════════════════════════════════════════════════

# Runtime
NODE_ENV="development" # default: development