env.example

# Fill in PLAID_CLIENT_ID and PLAID_SECRET from https://dashboard.plaid.com/developers/keys
PLAID_CLIENT_ID=
PLAID_SECRET=
# sandbox (test credentials user_good/pass_good) or production (real banks)
PLAID_ENV=sandbox
# Required products — Link filters to institutions/accounts supporting ALL of
# these. Keep to products every account has so credit cards / checking still link.
PLAID_PRODUCTS=transactions
# Optional products — pulled when available (e.g. brokerage holdings) but never
# block linking a credit-card-only or depository-only account.
PLAID_OPTIONAL_PRODUCTS=investments
PLAID_COUNTRY_CODES=US
APP_ENCRYPTION_KEY=
DATABASE_PATH=./data/budgetr.db

# Live ticker prices on the Investments page (real-time WebSocket + REST quotes).
# Optional — without it the page shows Plaid's end-of-day prices.
# Get a free key at https://finnhub.io/dashboard
FINNHUB_API_KEY=

# ── Licensing / purchase path ────────────────────────────────────────────────
# The app enforces a 14-day trial then an offline Ed25519 license key. These vars
# are only for the enforcement side (any deployment):
#   BUDGETR_LICENSE_DISABLED=1   — self-hosters: turn the gate off entirely.
#   BUDGETR_LICENSE_KEY=BGTR1... — supply a key via env instead of the UI.
BUDGETR_LICENSE_DISABLED=
BUDGETR_LICENSE_KEY=

# ── VENDOR / CHECKOUT deployment ONLY (never set these on a user install) ─────
# Powers the marketing pricing CTA + the Polar → mint-and-email webhook.
# NEXT_PUBLIC_* are baked into the client bundle (safe: public URLs/price).
NEXT_PUBLIC_CHECKOUT_URL=            # Polar hosted checkout link (the Buy button)
NEXT_PUBLIC_PRICE=$29                # display price
NEXT_PUBLIC_SITE_URL=https://budgetr.dev
# Server-only secrets for /api/license/webhook (mint + email the signed key):
POLAR_WEBHOOK_SECRET=                # Polar webhook signing secret (whsec_...)
LICENSE_SIGNING_KEY=                 # PEM of scripts/license/signing-key.private.pem — SECRET, vendor only
RESEND_API_KEY=                      # Resend API key for delivering the key by email
LICENSE_FROM_EMAIL=budgetr <license@budgetr.dev>  # verified Resend sender