.env.example

# ============================
# == Database Configuration ==
# ============================

# MySQL connection information (Aiven-compatible)
# Aiven Service URL format: mysql://${DB_USERNAME}:${DB_PASSWORD}@${DB_HOST}:${DB_PORT}/${DB_NAME}?ssl-mode=${DB_SSL_MODE}

# MySQL host address (e.g., Aiven provides a hostname like mysql-xxxxx.aivencloud.com)
DB_HOST=mysql-your-project.aivencloud.com

# MySQL port (Aiven usually uses 25060 for secure MySQL)
DB_PORT=25060

# MySQL database name (default is often 'defaultdb' in Aiven)
DB_NAME=defaultdb

# MySQL username (e.g., 'avnadmin' by default in Aiven)
DB_USERNAME=avnadmin

# MySQL password (auto-generated by Aiven)
DB_PASSWORD=your_secure_password_here

# SSL mode: REQUIRED (encrypts traffic) — other options: VERIFY_CA, VERIFY_IDENTITY
DB_SSL_MODE=REQUIRED

# Server timezone: recommended to be UTC for consistency across environments
DB_SERVER_TIMEZONE=UTC

# JDBC URL format: jdbc:mysql://${DB_HOST}:${DB_PORT}/${DB_NAME}?ssl-mode=${DB_SSL_MODE}&serverTimezone=${DB_SERVER_TIMEZONE}
# Full JDBC URL (used in Java/Spring Boot applications)
DB_URL=jdbc:mysql://${DB_HOST}:${DB_PORT}/${DB_NAME}?ssl-mode=${DB_SSL_MODE}&serverTimezone=${DB_SERVER_TIMEZONE}

# =======================
# == JWT Configuration ==
# =======================

# A 256-bit Base64-encoded secret key used to sign and verify JWT tokens
# You can generate one at https://generate.plus/en/base64 (32 bytes = 256 bits)
APP_JWT_SECRET=your_256_bit_base64_secret_here

# JWT expiration time (e.g. PT1M = 1 minute, PT15M = 15 minutes, P1D = 1 day)
APP_JWT_EXPIRATION=PT15M

# ===============================
# == Backend API Configuration ==
# ===============================

# Allowed origins (CORS policy) — update for frontend production/development URLs
ALLOWED_ORIGINS=http://localhost:1357

# ==============================
# == Cloudinary Configuration ==
# ==============================

# Cloudinary cloud name: used to identify your Cloudinary account
CLOUDINARY_CLOUD_NAME=your_cloud_name

# Cloudinary API key: used for authentication with Cloudinary
CLOUDINARY_API_KEY=your_api_key

# Cloudinary API secret: used for secure operations with Cloudinary
CLOUDINARY_API_SECRET=your_api_secret

# Cloudinary URL: used to connect to Cloudinary services
CLOUDINARY_URL=cloudinary://@${CLOUDINARY_API_KEY}:${CLOUDINARY_API_SECRET}@${CLOUDINARY_CLOUD_NAME}

# ===============================
# == Cloudinary Avatar Uploads ==
# ===============================

# Local file path for the default avatar in resources (do not change)
CLOUDINARY_AVATAR_LOCAL_DEFAULT_PATH=cloudinary-avatar-default-local-path

# Public ID for the static default avatar image (used for public access)
CLOUDINARY_AVATAR_STATIC_PUBLIC_ID=cloudinary-avatar-static-public-id

# Avatar ID name when uploading a account’s custom avatar
CLOUDINARY_AVATAR_USER_AVATAR_ID=cloudinary-avatar-account-avatar-id