# ===========================================
# Oil Customer Gateway - Environment Configuration
# ===========================================
# Copy this file to .env.dev, .env.local, or .env.prod
# and fill in the appropriate values for each environment.
#
# IMPORTANT: Never commit actual .env files to version control!
# ===========================================

# ===========================================
# DATABASE CONFIGURATION (Required)
# ===========================================
POSTGRES_USERNAME=postgres
POSTGRES_PASSWORD=your_database_password_here
POSTGRES_SERVER=192.168.1.204
POSTGRES_PORT=5432
POSTGRES_DBNAME=eamco

# ===========================================
# JWT CONFIGURATION (Required)
# ===========================================
# Generate a secure secret key using: python -c "import secrets; print(secrets.token_hex(32))"
# IMPORTANT: Use a unique, strong key for production (at least 32 characters)
JWT_SECRET_KEY=generate_a_secure_random_key_here_at_least_32_chars
JWT_ALGORITHM=HS256
# Token expiry in minutes (30 for production, can use longer for dev)
JWT_ACCESS_TOKEN_EXPIRE_MINUTES=30

# ===========================================
# AUTHORIZE.NET PAYMENT GATEWAY (Required for payments)
# ===========================================
# Get these from your Authorize.Net merchant account
# Use sandbox credentials for development/testing
AUTH_NET_API_LOGIN_ID=your_api_login_id
AUTH_NET_TRANSACTION_KEY=your_transaction_key

# ===========================================
# SMTP EMAIL CONFIGURATION (Required for password reset)
# ===========================================
SMTP_SERVER=smtp.gmail.com
SMTP_PORT=587
SMTP_USERNAME=your_email@gmail.com
# For Gmail, use an App Password (not your regular password)
# Generate at: https://myaccount.google.com/apppasswords
SMTP_PASSWORD=your_app_password_here
SMTP_FROM_EMAIL=your_email@gmail.com

# ===========================================
# FRONTEND URL (Required for password reset links)
# ===========================================
FRONTEND_URL=http://localhost:3000

# ===========================================
# CORS ORIGINS (Optional - defaults based on MODE)
# ===========================================
# Comma-separated list of allowed origins
# Leave empty to use default origins for the current MODE
# CORS_ORIGINS=http://localhost:5173,http://localhost:8000