# Local dev: app runs on host (npm run dev), only Postgres runs in Docker.
# Production: docker-compose.yml runs the full stack (deploy via `make deploy`).

# --- Database ---
# Local: localhost:5432 (exposed from Docker). Server: db:5432 (Compose internal).
DATABASE_URL="postgresql://postgres:postgres@localhost:5432/moh_sass"

# --- URLs ---
NEXT_PUBLIC_APP_URL="http://localhost:3014"
NEXT_PUBLIC_SITE_URL="http://localhost:3014"
NEXT_PUBLIC_ADMIN_URL="http://rootmohfarawati.localhost:3014"
ADMIN_HOST="rootmohfarawati.localhost"

NEXT_TELEMETRY_DISABLED="1"

# --- Admin auth ---
ADMIN_PASSWORD="change-me"
ADMIN_AUTH_SECRET="replace-with-a-long-random-secret"
ADMIN_BASIC_AUTH_USER="change-me"
ADMIN_BASIC_AUTH_PASS="change-me"

# --- Production only (server .env) ---
# The full stack runs via docker-compose.yml behind Traefik. On the server set:
#   NEXT_PUBLIC_SITE_URL="https://mohfarawati.de"
#   NEXT_PUBLIC_ADMIN_URL="https://root.mohfarawati.de"
#   ADMIN_HOST="root.mohfarawati.de"
# Traefik wiring (override only if your server differs from the defaults):
#   TRAEFIK_NETWORK="proxy"          # the external network Traefik is on
#   TRAEFIK_ENTRYPOINT="websecure"   # HTTPS entrypoint name
#   TRAEFIK_CERTRESOLVER="cf"        # cert resolver that covers *.mohfarawati.de
# DATABASE_URL is set by docker-compose.yml to the internal db service — do not set it here.
