TaskFlow/.env.example at main · macwilling/TaskFlow · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
# ─── Supabase ────────────────────────────────────────────────────────────────
# Find these in your Supabase project: Settings → API
NEXT_PUBLIC_SUPABASE_URL=your_supabase_project_url_here
NEXT_PUBLIC_SUPABASE_ANON_KEY=your_supabase_anon_key_here
# WARNING: Service role key has full DB access — server-side only, never expose to client
SUPABASE_SERVICE_ROLE_KEY=your_supabase_service_role_key_here

# ─── Cloudflare R2 ───────────────────────────────────────────────────────────
# Find Account ID in Cloudflare Dashboard → R2
R2_ACCOUNT_ID=your_cloudflare_account_id_here
# Create an R2 API token in Cloudflare Dashboard → R2 → Manage R2 API Tokens
R2_ACCESS_KEY_ID=your_r2_access_key_id_here
R2_SECRET_ACCESS_KEY=your_r2_secret_access_key_here
R2_BUCKET_NAME=taskflow-files
# Public CDN URL for your R2 custom domain
R2_PUBLIC_URL=https://files.taskflow.macwillingham.com

# ─── Resend ──────────────────────────────────────────────────────────────────
# Create an API key in Resend Dashboard → API Keys (Send access only)
RESEND_API_KEY=your_resend_api_key_here
RESEND_DOMAIN=your_resend_domain_here (e.g. taskflow.macwillingham.com)

# ─── App ─────────────────────────────────────────────────────────────────────
# Used only for internal server-to-server API calls (server actions → API routes).
# Keep set for local dev; in production any stable origin works (e.g. the admin subdomain).
NEXT_PUBLIC_APP_URL=http://localhost:3000

# ─── Multi-tenant subdomain routing ──────────────────────────────────────────
# Base domain used to extract tenant slug from the Host header.
# Leave unset for local dev (no subdomains on localhost).
# Production example: taskflow.com
NEXT_PUBLIC_BASE_DOMAIN=billabledesk.com

# Cookie domain for cross-subdomain auth session sharing.
# Leading dot means the cookie is readable by all *.billabledesk.com subdomains.
# Leave unset for local dev.
# Production example: .billabledesk.com
NEXT_PUBLIC_COOKIE_DOMAIN=.billabledesk.com

# ─── Feature Flags ───────────────────────────────────────────────────────────
# Set to "true" to allow new tenant registration via /auth/register
# Set to "false" or remove in production if you don't want public sign-ups
ALLOW_REGISTRATION=true