.env.example

# Copy to .env.local and fill in.

# Auth.js — generate with: npx auth secret
AUTH_SECRET=

# MusicBrainz OAuth2 application
# Register at https://musicbrainz.org/account/applications
# Redirect URI for local dev: http://localhost:3000/api/auth/callback/musicbrainz
AUTH_MUSICBRAINZ_ID=
AUTH_MUSICBRAINZ_SECRET=

# CritiqueBrainz OAuth2 application — used for the "write a review"
# flow on album pages (gated behind flag:write_reviews). CritiqueBrainz
# runs its own OAuth provider (separate from MusicBrainz, despite both
# being MetaBrainz). Sign in to CritiqueBrainz first, then register at
# https://critiquebrainz.org/profile/applications/
# Redirect URI for local dev: http://localhost:3000/api/critiquebrainz/callback
# AUTH_CRITIQUEBRAINZ_ID=
# AUTH_CRITIQUEBRAINZ_SECRET=

# ListenBrainz user token. Required to embed LB Radio playlists on artist
# pages (the /explore/lb-radio API now requires auth as anti-scraper). Will
# also be needed for future write actions (submit listens, edit playlists).
# Generate yours at https://listenbrainz.org/profile/
# LISTENBRAINZ_TOKEN=

# Public site URL (used by Auth.js for OAuth redirects in production)
# AUTH_URL=https://achordion.example.com

# Upstash Redis — backs the shared MusicBrainz rate limiter so all
# serverless instances draw from one global 1-req/sec budget instead
# of each having their own (which 429s under any concurrency). Create
# a free DB at https://console.upstash.com/redis. Optional: without
# these the limiter falls back to an in-process queue (fine for local
# dev, not for production).
# UPSTASH_REDIS_REST_URL=
# UPSTASH_REDIS_REST_TOKEN=

# Feature flags — see lib/flags.ts. In production, flags are controlled
# at runtime via Upstash Redis (no redeploy needed):
#   SET  flag:<name>:default on|off       # everyone-on / kill switch
#   SADD flag:<name>:users <mb-username>  # per-user allowlist
# Locally (no Redis) the helpers fall back to env vars below.
# FEATURE_REVIEWS=on
# FEATURE_REVIEWS_USERS=alice,bob