.env.example

# Supabase Configuration (Client-side safe)
VITE_SUPABASE_URL=your_supabase_project_url
VITE_SUPABASE_ANON_KEY=your_supabase_anon_key

# Supabase Configuration (Server-side only - DO NOT PREFIX WITH VITE_)
SUPABASE_SERVICE_ROLE_KEY=your_service_role_key

# Application Configuration
VITE_APP_NAME=SupaKan
VITE_APP_URL=https://your-app-domain.vercel.app

# Feature Flags
VITE_ENABLE_MAGIC_LINK=true
VITE_ENABLE_OAUTH=true
VITE_ENABLE_EMAIL_SIGNUP=true

# OAuth Providers (if enabled)
VITE_GITHUB_CLIENT_ID=your_github_client_id
VITE_GOOGLE_CLIENT_ID=your_google_client_id

# Security
VITE_API_TIMEOUT=30000
VITE_MAX_UPLOAD_SIZE=5242880 # 5MB in bytes

# Cache Configuration
VITE_CACHE_TTL=3600 # 1 hour in seconds

# Optional Analytics Configuration
VITE_ENABLE_ANALYTICS=false

# AI Configuration (Server-side only - DO NOT PREFIX WITH VITE_)
OPENAI_API_KEY=your_openai_api_key_here

# Security Headers (Server-side only)
SECURITY_CORS_ALLOWED_ORIGINS=https://your-app-domain.vercel.app
SECURITY_RATE_LIMIT=100 # requests per minute
SECURITY_ENABLE_CSRF=true