.env.example

# Server Configuration (HF Spaces expects port 7860)
PORT=7860
NODE_ENV=production

# Encryption Key (MUST be 32 hex characters for AES-256-GCM)
# Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
ENCRYPTION_KEY=your-32-byte-hex-encryption-key-here

# JWT Secret (minimum 32 characters)
JWT_SECRET=your-jwt-secret-minimum-32-characters-long
JWT_EXPIRES_IN=7d

# Database
DATABASE_PATH=/data/realblocks.db

# Hugging Face Storage
HF_TOKEN=hf_your_token_here
HF_REPO_ID=your-username/realblocks-storage

# SMTP Email Configuration
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_SECURE=false
SMTP_USER=your-email@gmail.com
SMTP_PASS=your-app-password
EMAIL_FROM=noreply@realblocks.com

# CORS
CORS_ORIGIN=http://localhost:5173

# Server URL (used for Google OAuth callback)
# In development: http://localhost:3000
# In production: your public server URL
SERVER_URL=http://localhost:3000

# Google OAuth
GOOGLE_CLIENT_ID=your-google-client-id-here
GOOGLE_CLIENT_SECRET=your-google-client-secret-here
# Optional: override the callback URL (defaults to SERVER_URL/api/auth/google/callback)
# GOOGLE_CALLBACK_URL=

# Rate Limiting
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=100