.env.example

# === Shared ===
PLAYBACK_SIGNING_SECRET=         # HMAC-SHA256 secret (min 32 chars, must match both services)
INTERNAL_API_KEY=                # Shared API key for internal endpoints

# === Platform App ===
DATABASE_URL=file:./dev.db       # SQLite for dev, PostgreSQL connection string for prod
ADMIN_PASSWORD_HASH=             # bcrypt hash of admin password
HLS_SERVER_BASE_URL=http://localhost:4000  # Public URL of HLS Media Server
NEXT_PUBLIC_APP_NAME=StreamGate  # Branding name
SESSION_TIMEOUT_SECONDS=60       # Seconds before inactive viewing session is considered abandoned

# === HLS Media Server ===
PLATFORM_APP_URL=http://localhost:3000  # Platform App URL for revocation polling
STREAM_ROOT=./streams            # Local filesystem path for stream files
UPSTREAM_ORIGIN=                 # Upstream HLS origin (blank = local only)
SEGMENT_CACHE_ROOT=              # Defaults to STREAM_ROOT/cache/
SEGMENT_CACHE_MAX_SIZE_GB=50
SEGMENT_CACHE_MAX_AGE_HOURS=72
REVOCATION_POLL_INTERVAL_MS=30000
CORS_ALLOWED_ORIGIN=http://localhost:3000
PORT=4000