.env.example

# ====================================================
# OpsKnight Environment Configuration
# ====================================================
# Copy this file to .env and fill in your values.
# See SECURITY.md for production security guidelines.
# ====================================================

# ----------------------------------------------------
# DATABASE
# ----------------------------------------------------
# PostgreSQL connection string with recommended production settings
# Required: Yes
DATABASE_URL="postgresql://opsknight:opsknight_secure_password_change_me@localhost:5432/opsknight_db?sslmode=prefer&connection_limit=40&pool_timeout=30"

# ----------------------------------------------------
# AUTHENTICATION
# ----------------------------------------------------
# Full URL of your application (required for OAuth callbacks, links in emails)
# Required: Yes
# Server-side URL (internal container URL if applicable, otherwise same as APP_URL)
NEXTAUTH_URL="http://localhost:3000"

# Secret for signing JWTs and encrypting sessions
# Generate with: openssl rand -base64 32
# Required: Yes
NEXTAUTH_SECRET="dev-secret-key-for-development-only"

# ----------------------------------------------------
# ENCRYPTION
# ----------------------------------------------------
# 32-byte master key (hex-encoded, 64 characters) used to encrypt sensitive
# database fields such as SSO client secrets and Slack integration tokens.
# Generate with: openssl rand -hex 32
# Required: Yes (in production). A safe dev fallback is used automatically in development.
# ENCRYPTION_KEY="your-64-char-hex-key-here"

# ----------------------------------------------------
# APPLICATION URL (Client-Side)
# ----------------------------------------------------
# Public-facing application URL (used in emails, SMS, push notifications, and client-side logic)
# Required: Yes (for production and proper client-side functioning)
NEXT_PUBLIC_APP_URL="http://localhost:3000"