.env.example

# --- Supabase ---------------------------------------------------------------
# Public (safe to expose to the browser): project URL + publishable key.
NEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co
# Modern publishable key (preferred). Legacy NEXT_PUBLIC_SUPABASE_ANON_KEY also works.
NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY=sb_publishable_xxx
# NEXT_PUBLIC_SUPABASE_ANON_KEY=your-anon-key   # legacy fallback

# Server-only. NEVER prefix with NEXT_PUBLIC_ and never import into client code.
# Used only by trusted server contexts (cron, admin actions, manifest export).
# Modern secret key (preferred). Legacy SUPABASE_SERVICE_ROLE_KEY also works.
SUPABASE_SECRET_KEY=sb_secret_xxx
# SUPABASE_SERVICE_ROLE_KEY=your-service-role-key   # legacy fallback

# Direct (pooled via Supavisor, transaction mode) connection string for migrations.
SUPABASE_DB_URL=postgresql://postgres:[password]@[host]:6543/postgres

# --- App --------------------------------------------------------------------
# Public base URL of the deployment (used for absolute links / QR payloads).
NEXT_PUBLIC_SITE_URL=http://localhost:3000

# Secret used to sign e-ticket QR tokens (HMAC). Generate: openssl rand -base64 32
TICKET_SIGNING_SECRET=change-me-in-production

# Default reservation hold window (minutes) for over-the-counter payment.
RESERVATION_HOLD_MINUTES=120

# --- Email (Resend) ---------------------------------------------------------
# Transactional email (e.g. superadmin notification on a new shipping-line trial signup).
# If RESEND_API_KEY/EMAIL_FROM are unset, emails are logged (PII-free) instead of sent,
# so local dev still works.
RESEND_API_KEY=
EMAIL_FROM="BonVoyage <noreply@yourdomain.com>"
# Where new-trial signup notifications are sent (the platform superadmin's inbox).
SUPERADMIN_EMAIL=

# --- Optional: rate limiting (Upstash Redis) --------------------------------
# UPSTASH_REDIS_REST_URL=
# UPSTASH_REDIS_REST_TOKEN=