# Template SaaS Backend Configuration
# Copy this file to .env and adjust values

# Server
NODE_ENV=development
PORT=3001

# Database
DB_HOST=localhost
DB_PORT=5432
DB_NAME=template_saas_dev
DB_USER=gamilit_user
DB_PASSWORD=GO0jAOgw8Yzankwt

# JWT
JWT_SECRET=your-super-secret-jwt-key-change-in-production
JWT_EXPIRES_IN=15m
JWT_REFRESH_EXPIRES_IN=7d

# CORS
CORS_ORIGIN=http://localhost:3000

# Stripe Integration (optional - leave empty to disable)
STRIPE_SECRET_KEY=sk_test_your_stripe_secret_key
STRIPE_PUBLISHABLE_KEY=pk_test_your_stripe_publishable_key
STRIPE_WEBHOOK_SECRET=whsec_your_webhook_secret

# OAuth 2.0 Integration (optional - leave empty to disable)
# Generate encryption key with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
OAUTH_TOKEN_ENCRYPTION_KEY=
OAUTH_FRONTEND_CALLBACK_URL=http://localhost:5173/auth/oauth/callback

# Google OAuth (https://console.cloud.google.com/apis/credentials)
OAUTH_GOOGLE_CLIENT_ID=
OAUTH_GOOGLE_CLIENT_SECRET=
OAUTH_GOOGLE_CALLBACK_URL=http://localhost:3001/api/auth/oauth/google/callback

# Microsoft OAuth (https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps)
OAUTH_MICROSOFT_CLIENT_ID=
OAUTH_MICROSOFT_CLIENT_SECRET=
OAUTH_MICROSOFT_CALLBACK_URL=http://localhost:3001/api/auth/oauth/microsoft/callback

# GitHub OAuth (https://github.com/settings/developers)
OAUTH_GITHUB_CLIENT_ID=
OAUTH_GITHUB_CLIENT_SECRET=
OAUTH_GITHUB_CALLBACK_URL=http://localhost:3001/api/auth/oauth/github/callback

# Apple OAuth (https://developer.apple.com/account/resources/identifiers)
# 1. Create an App ID with Sign in with Apple capability
# 2. Create a Services ID for your web application
# 3. Create a Sign in with Apple key and download the .p8 file
OAUTH_APPLE_CLIENT_ID=               # Services ID (e.g., com.example.app.web)
OAUTH_APPLE_TEAM_ID=                 # Your Apple Developer Team ID
OAUTH_APPLE_KEY_ID=                  # Key ID from the .p8 key
OAUTH_APPLE_PRIVATE_KEY=             # Contents of .p8 file (replace newlines with \n)
OAUTH_APPLE_CALLBACK_URL=http://localhost:3001/api/auth/oauth/apple/form-callback