# Copy to secrets/backend.env on the server.
# DATABASE_URL must match database.env credentials (host = postgres service name).
NODE_ENV=production
PORT=3000

DATABASE_URL=postgresql://dyolink_user:CHANGE_ME_STRONG_DB_PASSWORD@postgres:5432/dyolink_db

# Must be real random strings (openssl rand -hex 32). Values containing CHANGE_ME will crash the app.
JWT_SECRET=replace_with_openssl_rand_hex_32_output
JWT_EXPIRES_IN=15m
JWT_REFRESH_SECRET=replace_with_a_different_openssl_rand_hex_32_output
JWT_REFRESH_EXPIRES_IN=30d

# Must match DOMAIN in .env — used for CORS, invite links, cookies
FRONTEND_URL=https://nudentic.ir

# AdminJS at https://nudentic.ir/admin (nginx proxies /admin to the API).
# Change these — the code defaults are only for local development.
ADMINJS_EMAIL=admin@nudentic.ir
ADMINJS_PASSWORD=CHANGE_ME_STRONG_ADMINJS_PASSWORD

# Required for HTTPS — browsers reject Secure cookies over plain HTTP
COOKIE_SECURE=true

# SMS (sms.ir)
SMS_IR_API_KEY=CHANGE_ME_SMS_IR_API_KEY
SMS_IR_TEMPLATE_ID=123456

# GlitchTip (Sentry SDK). Empty = disabled. Use the dyolink-backend project DSN.
# SENTRY_DSN=https://PUBLIC_KEY@errors.wixur.ir/1
# SENTRY_ENVIRONMENT=production
