.env.example

DATABASE_URL=postgresql://user:pass@host/db?sslmode=require
DATABASE_URL_UNPOOLED=postgresql://user:pass@host/db?sslmode=require

KV_REST_API_URL=https://example.upstash.io
KV_REST_API_TOKEN=

# Vercel Blob (snapshot agent binary)
BLOB_READ_WRITE_TOKEN=

# Hetzner credentials are now per-user — set them in /dashboard/account.
# The build-snapshot.sh script still reads HETZNER_TOKEN/IMAGE_ID/LOCATION/
# SERVER_TYPE/SSH_KEY directly from .env.local for the admin gold-image build.

BOOTSTRAP_JWT_SECRET=
BETTER_AUTH_SECRET=
BETTER_AUTH_URL=http://localhost:3000

# On Vercel, SEO_URL and API_URL are derived from VERCEL_PROJECT_PRODUCTION_URL
# and VERCEL_BRANCH_URL automatically. Locally, both fall back to
# http://localhost:3000.
#
# VERCEL_AUTOMATION_BYPASS_SECRET is required on Vercel preview deployments so
# Hetzner agents can punch through deployment protection on callbacks. It's not
# needed locally or in production.
VERCEL_AUTOMATION_BYPASS_SECRET=

NEXT_PUBLIC_SENTRY_DSN=
SENTRY_ORG=
SENTRY_PROJECT=