# Copy to backend.staging.env — DATABASE_URL must match database.staging.env credentials.
NODE_ENV=production
PORT=3000

DATABASE_URL=postgresql://postgres:changeme_staging_strong_password@postgres:5432/dyolink_db

JWT_SECRET=replace_with_a_long_random_secret
JWT_EXPIRES_IN=15m
JWT_REFRESH_SECRET=another_long_random_secret_different_from_JWT_SECRET
JWT_REFRESH_EXPIRES_IN=30d

# CORS, cookies, and invite links — must match how users open the app
FRONTEND_URL=https://wixur.ir

# AdminJS at https://wixur.ir/admin (nginx proxies /admin to the API).
ADMINJS_EMAIL=admin@wixur.ir
ADMINJS_PASSWORD=CHANGE_ME_STRONG_ADMINJS_PASSWORD

# TLS is terminated on Windows nginx :443 — cookies must be Secure
COOKIE_SECURE=true

# SMS (sms.ir)
SMS_IR_API_KEY=CHANGE_ME_SMS_IR_API_KEY
SMS_IR_TEMPLATE_ID=123456

# GlitchTip (Sentry SDK). Empty = disabled. Use the dyolink-backend project DSN.
# SENTRY_DSN=https://PUBLIC_KEY@errors.wixur.ir/1
# SENTRY_ENVIRONMENT=staging
