# Server & Connectivity
PORT=8788
NODE_ENV=production
PUBLIC_URL=https://boop.cat
# Generate a secure random string (e.g. `openssl rand -hex 32`)
SESSION_SECRET=
TRUST_PROXY=1
COOKIE_SECURE=1

# Database
FSD_DATA_DIR=/fsd
# Generate a 32-byte hex string (e.g. `openssl rand -hex 32`)
ENV_ENCRYPTION_SECRET=

# Edge Delivery (Static Sites)
FSD_DELIVERY=edge
FSD_EDGE_ROOT_DOMAIN=boop.cat

# Cloudflare (Required for Edge)
CF_API_TOKEN=
CF_ACCOUNT_ID=
CF_ZONE_ID=
CF_KV_NAMESPACE_ID=

# Backblaze B2 (Storage)
B2_KEY_ID=
B2_APP_KEY=
B2_BUCKET_ID=
# Match this with your edge/wrangler.toml (currently 'scan-blue-sites')
B2_BUCKET_NAME=scan-blue-sites

# Email (SMTP)
MAIL_FROM=hello@boop.cat
SMTP_HOST=
SMTP_PORT=465
SMTP_USER=hello@boop.cat
SMTP_PASS=
SMTP_FROM_NAME="boop.cat"

# Auth: GitHub (Optional)
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
GITHUB_CALLBACK_URL=https://boop.cat/auth/github/callback

# GitHub App (Required for Auto-Deploy & Private Repos)
# Create at https://github.com/settings/apps/new
# Permissions: Contents(Read), Metadata(Read) | Events: Push
GITHUB_APP_ID=
GITHUB_APP_PRIVATE_KEY=
GITHUB_APP_WEBHOOK_SECRET=
GITHUB_APP_INSTALL_URL=https://github.com/apps/boop-host

# Auth: Google (Optional)
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_CALLBACK_URL=https://boop.cat/auth/google/callback

# Auth: ATProto / Bluesky (Optional)
ATPROTO_PRIVATE_KEY_1=
ATPROTO_CLIENT_ID=https://boop.cat/client-metadata.json
ATPROTO_CLIENT_NAME="boop.cat"
ATPROTO_REDIRECT_URI=https://boop.cat/auth/atproto/callback
ATPROTO_SCOPE="atproto transition:generic account:email"
ATPROTO_LOGO_URI=https://boop.cat/public/logo.svg
ATPROTO_TOS_URI=https://boop.cat/tos
ATPROTO_POLICY_URI=https://boop.cat/privacy

# Admin API
ADMIN_API_KEY=

# Security / Anti-bot
TURNSTILE_SITE_KEY=
TURNSTILE_SECRET_KEY=

# DMCA Process
DISCORD_DMCA_WEBHOOK_URL=
IMAP_HOST=
IMAP_PORT=993
IMAP_USER=dmca@boop.cat
IMAP_PASSWORD=
IMAP_TLS=true