# ============================================================================= # .env.production — secrets + dynamic ports for the running containers # ============================================================================= # # deploy.sh writes the first three lines on every successful deploy. # Everything below is YOUR responsibility to populate. deploy.sh preserves # unknown lines verbatim across deploys (it only overwrites the lines it # knows about), so you can safely commit this file to a private repo or # provision it via your secrets manager of choice. # # In production, this file should be mode 0600 and owned by the deploy user. # ============================================================================= # --- managed by deploy.sh (do not edit by hand) ------------------------------- POSTGREST_HOST_PORT=3011 NEXTJS_HOST_PORT=3012 NEXT_PUBLIC_API_URL=http://localhost:3011 # --- PostgREST connection --------------------------------------------------- PGRST_DB_URI=postgres://app:secret@db.internal:5432/app_production PGRST_DB_ANON_ROLE=anon PGRST_DB_SCHEMA=public # --- Next.js server-side secrets ------------------------------------------- # Anything not prefixed NEXT_PUBLIC_ is server-only and read at request time. DATABASE_URL=postgres://app:secret@db.internal:5432/app_production # Auth.js v5 (NextAuth). Generate AUTH_SECRET with `npx auth secret` or # `openssl rand -base64 32`. AUTH_URL is the public base URL the browser # uses to build OAuth callback URLs. AUTH_SECRET=change-me-to-a-long-random-string AUTH_URL=https://app.example.com NEXT_PUBLIC_AUTH_URL=https://app.example.com ALLOW_DEV_LOGIN=false # Google OAuth provider for Auth.js. Set both AUTH_GOOGLE_ID/SECRET and # GOOGLE_CLIENT_ID/SECRET (the v5 code reads either name). GOOGLE_CLIENT_ID= GOOGLE_CLIENT_SECRET= AUTH_GOOGLE_ID= AUTH_GOOGLE_SECRET= # --- External services ------------------------------------------------------ STRIPE_SECRET_KEY=sk_live_replace_me STRIPE_PUBLISHABLE_KEY=pk_live_replace_me STRIPE_WEBHOOK_SECRET=whsec_replace_me SMTP_HOST=smtp.example.com SMTP_PORT=587 SMTP_USER=apikey SMTP_PASSWORD=replace_me SMTP_FROM="My App "