.env.example

# ===== REQUIRED =====
OPENAI_API_KEY=<REQUIRED>
SERPAPI_API_KEY=<REQUIRED>

# Backend image & data volume
BACKEND_IMAGE=fuzanwenn/stock-analyst:latest
DATA_VOLUME=stockdata
DOCKER_HOST=unix:///var/run/docker.sock

# CORS (comma-separated list of allowed origins)
# DEV example:
FRONTEND_ORIGIN=http://localhost:5173,http://localhost:3000

# Session / cookies
SESSION_SECRET=<REQUIRED>
AUTH_SECRET=<REQUIRED>
SESSION_SAMESITE=none
SESSION_HTTPS_ONLY=true
SESSION_COOKIE_NAME=session
COOKIE_SECURE=true
# Leave COOKIE_DOMAIN empty to default to the API host (api.vynnai.com in prod)
COOKIE_DOMAIN=
COOKIE_PATH=/

# OAuth (names used by your code; see step 4 to normalize)
OAUTH_GOOGLE_CLIENT_ID=<REQUIRED>
OAUTH_GOOGLE_CLIENT_SECRET=<REQUIRED>
OAUTH_GITHUB_CLIENT_ID=<REQUIRED>
OAUTH_GITHUB_CLIENT_SECRET=<REQUIRED>

# When deployed on subdomain:
# OAUTH_REDIRECT_BASE=https://api.vynnai.com