.env.example

# MongoDB connection details
MONGODB_URI="mongodb://localhost:27017/"

# Redis connection details
REDIS_URI="redis://localhost:6379"
REDIS_TTL_SECONDS=3600 # 1 hour

# Sentry configuration (error tracking & performance monitoring)
SENTRY_DSN=""                          # Leave empty to disable Sentry
SENTRY_SEND_PII="false"                # Send user emails/IPs (consider GDPR implications)
SENTRY_TRACES_SAMPLE_RATE=0.1       # % of transactions to capture (1.0 in dev, 0.05-0.1 in prod to reduce costs)
SENTRY_PROFILE_SAMPLE_RATE=0.05     # % of profiling sessions to capture (1.0 in dev, 0.01-0.05 in prod, very expensive)

# Analytics & tracking (leave empty to disable)
CLARITY_ID=""                          # Microsoft Clarity tracking ID
HCAPTCHA_SITEKEY=""                    # hCaptcha site key (public, used in templates)

# App configs
SECRET_KEY="" # To generate: python -c "import os; print(os.urandom(32).hex())"
HOST_URI="127.0.0.1:8000"
ENV="development"  # change to "production" in production

# CORS — allowed origins for private routes (auth, oauth, dashboard)
# Public API routes (/api/v1/*) always allow all origins.
# Set to your frontend domain(s) in production. Leave empty to block all cross-origin
# requests to private routes (safe default).
# Example: CORS_PRIVATE_ORIGINS='["https://spoo.me","chrome-extension://your-ext-id"]'
CORS_PRIVATE_ORIGINS='[]'

# Logging Configuration
LOG_LEVEL=DEBUG                    # DEBUG, INFO, WARNING, ERROR, CRITICAL
LOG_FORMAT=console                   # json (prod) or console (dev)

# Sampling Rates (0.0 to 1.0)
SAMPLE_RATE_REDIRECT=0.05        # 5% of URL redirects
SAMPLE_RATE_STATS=0.20           # 20% of stats queries
SAMPLE_RATE_CACHE=0.01           # 1% of cache operations
SAMPLE_RATE_EXPORT=0.80          # 80% of exports

# Configs for the contact and report forms
CONTACT_WEBHOOK=""
URL_REPORT_WEBHOOK=""
HCAPTCHA_SECRET=""

# JWT configs
JWT_ISSUER=
JWT_AUDIENCE=
ACCESS_TOKEN_TTL_SECONDS=3600
REFRESH_TOKEN_TTL_SECONDS=2592000
COOKIE_SECURE="false"    # false: for local dev, true: for production
JWT_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\n.....\n-----END PRIVATE KEY-----"
JWT_PUBLIC_KEY="-----BEGIN PUBLIC KEY-----\n.....\n-----END PUBLIC KEY-----"
JWT_SECRET=""

# To generate these private key run this commands:
# openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -out jwt_private_key.pem

# for public key:
# openssl rsa -pubout -in jwt_private_key.pem -out jwt_public_key.pem

# for JWT_SECRET (if not using RSA keys):
# import os; print(os.urandom(32).hex())
# Use JWT_SECRET only if you are not using RSA keys (JWT_PRIVATE_KEY and JWT_PUBLIC_KEY)

# OAuth configs

# Google OAuth
# How to generate these keys:
# 1. Go to https://console.cloud.google.com/apis/credentials
# 2. Create a new project (if you don't have one)
# 3. Enable the Google+ API
# 4. Configure OAuth consent screen (make sure to add http://localhost:8000 and http://127.0.0.1:8000)
# 5. Create OAuth 2.0 Client IDs and get the client ID and client secret
# 6. Set the authorized redirect URIs / Redirect URIs to:
#    http://localhost:8000/oauth/google/callback (for local dev)
#    http://127.0.0.1:8000/oauth/google/callback (for local dev)
#    http://your-production-domain.com/oauth/google/callback (for production)
GOOGLE_OAUTH_CLIENT_ID=""
GOOGLE_OAUTH_CLIENT_SECRET=""
GOOGLE_OAUTH_REDIRECT_URI="http://127.0.0.1:8000/oauth/google/callback"

# GitHub OAuth
# How to generate these keys:
# 1. Go to https://github.com/settings/developers
# 2. Create a new OAuth App (Not GitHub App !important)
# 3. Set the homepage URL to http://127.0.0.1:8000 or http://localhost:8000 for local dev
# 4. Set the authorization callback URI to http://127.0.0.1:8000/oauth/github/callback
# For production, set it to http://your-production-domain.com/oauth/github/callback
# 5. Make sure, where this app can be installed, "Any account" is selected
# 6. click on "Generate a new Client Secret" to get the client secret
GITHUB_OAUTH_CLIENT_ID=""
GITHUB_OAUTH_CLIENT_SECRET=""
GITHUB_OAUTH_REDIRECT_URI="http://127.0.0.1:8000/oauth/github/callback"


# Discord OAuth
# How to generate these keys:
# 1. Go to https://discord.com/developers/applications
# 2. Create a new application
# 3. Go to OAuth2 section and add a redirect URI:
#    http://localhost:8000/oauth/discord/callback (for local dev)
#    http://your-production-domain.com/oauth/discord/callback (for production)
# 4. In the scopes section, select "identify" and "email"
DISCORD_OAUTH_CLIENT_ID=""
DISCORD_OAUTH_CLIENT_SECRET=""
DISCORD_OAUTH_REDIRECT_URI="http://127.0.0.1:8000/oauth/discord/callback"

# ZeptoMail Configuration (for transactional emails)
# How to get these credentials:
# 1. Sign up at https://www.zoho.com/zeptomail/
# 2. Add and verify your domain (DKIM + CNAME records)
# 3. Create a Mail Agent
# 4. Go to SMTP/API section and copy your Send Mail Token
# 5. Set ZEPTO_API_TOKEN to the token value
ZEPTO_API_TOKEN=""
ZEPTO_FROM_EMAIL="noreply@your-domain.com"
ZEPTO_FROM_NAME="Your App Name"
APP_URL="http://127.0.0.1:8000"

GITHUB_REPO="" # org/repo format