.env.example

# Database Configuration
DB_HOST=localhost
DB_PORT=5432
DB_USERNAME=postgres
DB_PASSWORD=postgres
DB_NAME=lyricsdb


# Stripe Configuration
STRIPE_SECRET_KEY=
STRIPE_PUBLISHABLE_KEY=pk_test_
STRIPE_WEBHOOK_SECRET=whsec_your_webhook_secret_here

# Redis Configuration
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=your_redis_password

# Security Configuration
NODE_ENV=development
ALLOWED_ORIGINS=http://localhost:3000,http://localhost:3001
ALLOWED_IPS=127.0.0.1,::1,192.168.1.0/24
VALID_API_KEYS=your_api_key_1,your_api_key_2,your_api_key_3
ENABLE_IP_WHITELIST=false
ENABLE_API_KEYS=false
LOG_LEVEL=info

# Session Security
SESSION_SECRET=your-super-secret-session-key-change-this-in-production
CSRF_SECRET=your-csrf-secret-key-change-this-in-production

# JWT Configuration
JWT_SECRET=your-super-secret-jwt-key-change-this-in-production
JWT_REFRESH_SECRET=your-super-secret-refresh-key-change-this-in-production
JWT_EXPIRES_IN=7d

# Frontend URL (for email links)
FRONTEND_URL=http://localhost:3000

# Email Service Configuration
EMAIL_SERVICE=nodemailer
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_USER=your_gmail@gmail.com
SMTP_PASS=your_app_password

# OAuth Configuration
# Google OAuth
GOOGLE_CLIENT_ID=your_google_client_id
GOOGLE_CLIENT_SECRET=your_google_client_secret
GOOGLE_CALLBACK_URL=http://localhost:3000/auth/google/callback

# Facebook OAuth
FACEBOOK_APP_ID=your_facebook_app_id
FACEBOOK_APP_SECRET=your_facebook_app_secret
FACEBOOK_CALLBACK_URL=http://localhost:3000/auth/facebook/callback

# GitHub OAuth
GITHUB_CLIENT_ID=your_github_client_id
GITHUB_CLIENT_SECRET=your_github_client_secret
GITHUB_CALLBACK_URL=http://localhost:3000/auth/github/callback

# Twitter OAuth
TWITTER_CONSUMER_KEY=your_twitter_consumer_key
TWITTER_CONSUMER_SECRET=your_twitter_consumer_secret
TWITTER_CALLBACK_URL=http://localhost:3000/auth/twitter/callback

# Server Configuration
PORT=3000
HOST=0.0.0.0

# Production Security (set these in production)
# NODE_ENV=production
# ALLOWED_ORIGINS=https://yourdomain.com,https://app.yourdomain.com
# ENABLE_IP_WHITELIST=true
# ENABLE_API_KEYS=true
# LOG_LEVEL=warn