.env.example

# ============================================================================
# SIDURI - Environment Configuration
# ============================================================================
# Copy this file to .env and fill in your values:
#   cp .env.example .env
#
# Required variables are marked with [REQUIRED]
# All others are optional with sensible defaults
# ============================================================================

# ----------------------------------------------------------------------------
# REQUIRED CONFIGURATION
# ----------------------------------------------------------------------------

# [REQUIRED] JWT Secret Key
# Used to sign authentication tokens. Must be at least 32 characters.
# Generate a secure random string with: openssl rand -base64 32
JWT_SECRET=your-secret-key-minimum-32-characters-long

# [REQUIRED] Google Cloud Storage Bucket
# The GCS bucket name where videos will be stored.
# Create with: gsutil mb gs://your-bucket-name
GCS_BUCKET=your-bucket-name

# [REQUIRED] Google Cloud Project ID
# Your GCP project ID (not the project number).
# Find at: https://console.cloud.google.com/home/dashboard
GCS_PROJECT_ID=your-project-id

# ----------------------------------------------------------------------------
# SERVER CONFIGURATION
# ----------------------------------------------------------------------------

# Server port (default: 8080)
# Cloud Run expects 8080, change only for local development
PORT=8080

# Environment mode (default: development)
# Set to "production" for:
#   - Secure cookies (httpOnly, sameSite, secure flags)
#   - Trust proxy headers from Cloud Run
NODE_ENV=development

# Data directory for SQLite database (default: ./data)
# In production with GCS FUSE, set to /app/data
# DATA_DIR=./data

# Public base URL for shareable links (default: auto-detected)
# Set this if your app is behind a reverse proxy or load balancer
# Example: https://video.yourdomain.com
# BASE_URL=https://video.yourdomain.com

# ----------------------------------------------------------------------------
# ACCESS CONTROL
# ----------------------------------------------------------------------------

# Allowed email domains for registration (default: all domains allowed)
# Comma-separated list of domains. Users can only register with these email domains.
# Leave empty or comment out to allow any email domain.
# Example: mycompany.com,partner.com
# ALLOWED_EMAIL_DOMAINS=yourdomain.com,anotherdomain.com

# Allowed CORS origins (default: localhost only)
# Comma-separated list of origins that can make API requests.
# Include your frontend domain(s) here.
# Example: https://video.mycompany.com,https://mycompany.com
# ALLOWED_ORIGINS=http://localhost:8080,https://yourdomain.com

# ----------------------------------------------------------------------------
# EMAIL CONFIGURATION (Optional)
# Required for: password reset emails, view notifications
# ----------------------------------------------------------------------------

# SMTP server hostname
# Common providers:
#   - Gmail: smtp.gmail.com (requires app password)
#   - Outlook: smtp.office365.com
#   - SendGrid: smtp.sendgrid.net
SMTP_HOST=smtp.example.com

# SMTP server port
# Common ports:
#   - 587: TLS (recommended)
#   - 465: SSL
#   - 25: Unencrypted (not recommended)
SMTP_PORT=587

# SMTP username (usually your email address)
# For Gmail, use your full email address
SMTP_USER=noreply@example.com

# SMTP password
# For Gmail, create an App Password at: https://myaccount.google.com/apppasswords
# For other providers, use your account password or API key
SMTP_PASS=your-smtp-password

# From address for outgoing emails (default: SMTP_USER)
# Can include display name: "Video Notifications <noreply@example.com>"
SMTP_FROM=noreply@example.com