# Copy to .env and fill in values. Never commit .env.
# Get a key from Google AI Studio: https://aistudio.google.com/apikey
GEMINI_API_KEY=

# core-backend privileged endpoints (/invites, /admin/metrics, /admin/dashboard, /admin/push-test)
ADMIN_API_TOKEN=

# Shared demo invite DEMO-YKAVU on signup UI (multiple testers). Set 0 to disable.
ALLOW_DEMO_INVITE=1

# FCM push (escalation notify + /admin/push-test). Prefer HTTP v1 service account:
#   place JSON at secrets/firebase-service-account.json (see docs/fcm-setup.md)
# Optional legacy key (often disabled in new Firebase projects):
FCM_SERVER_KEY=
FCM_SERVICE_ACCOUNT_FILE=/secrets/firebase-service-account.json
# FCM_SERVICE_ACCOUNT_JSON=   # alternative: paste minified JSON (avoid if possible)

# --- docker compose (N2-B / msn.iykyka.com) ---
POSTGRES_USER=ykavu
POSTGRES_PASSWORD=change-me
POSTGRES_DB=ykavu

# Flutter web build-time API origin (nginx on web proxies API to core-backend).
# Production: https://msn.iykyka.com
# Local compose smoke: http://localhost:8088
PUBLIC_API_BASE=https://msn.iykyka.com

# Host port mapped to web:80
WEB_HOST_PORT=8088

# --- N4-W4 Web Push (Flutter web build-args / dart-define; never commit real values) ---
# Firebase Console → Project settings → Your apps → Web app (msn.iykyka.com)
# + Cloud Messaging → Web Push certificates (VAPID key pair).
# Leave empty to keep install: placeholder tokens until secrets are ready.
FIREBASE_API_KEY=
FIREBASE_AUTH_DOMAIN=
FIREBASE_PROJECT_ID=
FIREBASE_STORAGE_BUCKET=
FIREBASE_MESSAGING_SENDER_ID=
FIREBASE_APP_ID=
FIREBASE_VAPID_KEY=