.env.example

# =============================================================================
# Audiobookphile — Web Environment (for the open-source community)
# =============================================================================
# This file documents every variable the web app reads. It is NOT the source
# of truth — that lives in audiobookphile-backend/env/{local,prod}.env, and
# `audiobookphile-backend/scripts/sync-env.sh` generates the per-repo env
# files. See https://github.com/organicnz/audiobookphile-backend.
#
# Secrets are never stored in env files. Configure them in:
#   - Vercel project env vars       (web production / preview)
#   - Supabase Vault                (database secrets)
#   - Supabase Edge Function secrets
#
# Local development: run `../audiobookphile-backend/scripts/sync-env.sh`
# to generate .env.local from the canonical local.env.

# --- Build-time (NEXT_PUBLIC_*) — inlined into the browser bundle -----------

# Supabase project URL. Also used in next.config.ts to build the /api/*
# rewrite destination. Missing: every API route points at undefined/...
NEXT_PUBLIC_SUPABASE_URL=

# Supabase anon (public) key — safe to expose to the browser.
NEXT_PUBLIC_SUPABASE_ANON_KEY=

# Canonical public URL of the deployment (no trailing slash). Used for OAuth
# redirects and email confirmation links. Local: http://localhost:3000
NEXT_PUBLIC_SITE_URL=

# (Optional) PostHog project key (phc_...). Missing: placeholder used, no
# analytics captured.
NEXT_PUBLIC_POSTHOG_KEY=

# (Optional) PostHog ingestion host. Defaults to https://us.i.posthog.com
NEXT_PUBLIC_POSTHOG_HOST=

# (Optional) Sentry DSN for error monitoring. Missing: errors are not
# reported. The DSN public key is safe for client bundles.
NEXT_PUBLIC_SENTRY_DSN=

# --- Server-side — never prefix with NEXT_PUBLIC_ ----------------------------

# Supabase service role key — server-only admin operations. MUST NEVER be
# exposed to the browser.
SUPABASE_SERVICE_ROLE_KEY=