.env.example

# .env.example
# HanoServices Environment Variables Documentation

# === Server Configuration ===
# PORT: The port the Express application binds to.
PORT=3000
# NODE_ENV: 'development' or 'production'. Triggers strict security checks.
NODE_ENV=development

# === Database (PostgreSQL / PostGIS) ===
# Local or Heroku/Render standard PostgreSQL connection URL.
DB_HOST=localhost
DB_PORT=5432
DB_USER=postgres
DB_PASSWORD=your_secure_db_password
DB_NAME=hano_db

# === Redis ===
# Enables caching. Optional but recommended.
REDIS_ENABLED=true
REDIS_URL=redis://localhost:6379
REDIS_PASSWORD=
REDIS_TLS=false
REDIS_DEFAULT_TTL_SECONDS=60

# === JWT & Authentication ===
# JWT_SECRET: Strong random string used to sign JWT tokens. Crucial for security in production.
JWT_SECRET=super_secret_jwt_key
# JWT_EXPIRES_IN: E.g., '1h', '7d'.
JWT_EXPIRES_IN=7d
JWT_REFRESH_EXPIRES_IN_DAYS=30
OTP_EXPIRY_MINUTES=5

# === Payments (Flutterwave) ===
# Required for the card and mobile money payment functionalities.
FLUTTERWAVE_PUBLIC_KEY=FLWPUBK_TEST-xxx
FLUTTERWAVE_SECRET_KEY=FLWSECK_TEST-xxx
FLUTTERWAVE_SECRET_HASH=your_webhook_signature_hash_here
FLUTTERWAVE_API_URL=https://api.flutterwave.com/v3
FLUTTERWAVE_ENVIRONMENT=development

# === Security & CORS ===
# CORS_ORIGIN: Comma-separated list of allowed domains in production, e.g., 'https://yourwebsite.com,https://api.yourwebsite.com'
CORS_ORIGIN=*

# === Integrations (Optional) ===
EXPO_ENABLED=false
SMS_API_KEY=
SMS_API_URL=
SUPABASE_URL=
SUPABASE_SERVICE_ROLE_KEY=
SUPABASE_BUCKET=
GOOGLE_MAPS_API_KEY=
OPENSTREETMAP_ENABLED=true