.env.example

# Copy this file to .env and fill in real values.
# Spring Boot reads this file automatically when running with the 'local' profile.
# Keys match the ${...} placeholders in application-local.properties.

# ── Mail (Google SMTP) ───────────────────────────────────────────────────────
# Without these, the app falls back to localhost:1025 (MailHog / no-op).
MAIL_HOST=smtp.gmail.com
MAIL_PORT=587
MAIL_USERNAME=you@gmail.com
MAIL_PASSWORD=your-app-password
MAIL_SMTP_AUTH=true
MAIL_SMTP_STARTTLS=true

# ── Google OAuth2 ────────────────────────────────────────────────────────────
GOOGLE_CLIENT_ID=your-client-id.apps.googleusercontent.com
GOOGLE_CLIENT_SECRET=your-client-secret

# ── JWT (RSA-2048) ───────────────────────────────────────────────────────────
# Generate a production key pair:
#   openssl genrsa 2048 | openssl pkcs8 -topk8 -nocrypt -outform DER | base64 | tr -d '\n'
#   openssl genrsa 2048 | openssl rsa -pubout -outform DER | base64 | tr -d '\n'  (from same key)
# JWT_PRIVATE_KEY=<base64-encoded PKCS8 DER private key>
# JWT_PUBLIC_KEY=<base64-encoded X.509 DER public key>

# ── Stripe ───────────────────────────────────────────────────────────────────
# STRIPE_SECRET_KEY=sk_test_...
# STRIPE_WEBHOOK_SECRET=whsec_...

# ── Storage (Cloudflare R2 / S3-compatible) ──────────────────────────────────
# For local dev, MinIO defaults in application-local.properties are used automatically.
# Set these to point at real R2 buckets when testing against production storage.
# STORAGE_ENDPOINT=https://<account-id>.r2.cloudflarestorage.com
# STORAGE_BUCKET=garden
# STORAGE_PRIVATE_BUCKET=garden-private
# STORAGE_ACCESS_KEY=your-r2-access-key
# STORAGE_SECRET_KEY=your-r2-secret-key
# STORAGE_BASE_URL=https://your-public-r2-domain.com/garden

# ── Frontend ─────────────────────────────────────────────────────────────────
# FRONTEND_URL=http://localhost:3000

# ── Admin notifications (optional) ───────────────────────────────────────────
# ADMIN_NOTIFICATION_EMAIL=admin@example.com