.env.example

# ===========================================
# Cribble Environment Configuration
# ===========================================
# Copy this file to .env.local and fill in your values
# NEVER commit .env or .env.local to git

# ----- Supabase (Required) -----
# Get these from: https://app.supabase.com → Project Settings → API
NEXT_PUBLIC_SUPABASE_URL=
NEXT_PUBLIC_SUPABASE_ANON_KEY=
SUPABASE_SERVICE_ROLE_KEY=

# ----- Database (Required) -----
# Get from: Supabase → Project Settings → Database → Connection String
DATABASE_URL=

# ----- Twitter/X OAuth (Required for Twitter login) -----
# Set up at: https://developer.twitter.com/en/portal/projects-and-apps
# App permissions: Read (users.read, tweet.read, offline.access)
TWITTER_CLIENT_ID=
TWITTER_CLIENT_SECRET=
TWITTER_REDIRECT_URI=http://localhost:3000/api/auth/twitter/callback

# ----- GitHub OAuth (Required for GitHub login) -----
# Set up at: https://github.com/settings/developers → New OAuth App
# Homepage URL: http://localhost:3000
# Callback URL: http://localhost:3000/api/auth/github/callback
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
GITHUB_REDIRECT_URI=http://localhost:3000/api/auth/github/callback

# ----- NextAuth (Required) -----
# Generate secret: openssl rand -base64 32
NEXTAUTH_SECRET=
NEXTAUTH_URL=http://localhost:3000

# ----- App URL (Required) -----
NEXT_PUBLIC_APP_URL=http://localhost:3000
NEXT_PUBLIC_DOMAIN=http://localhost:3000

# ----- Security (Required in production) -----
# Generate: openssl rand -base64 32 (must be 32+ chars in production)
CRON_SECRET=

# Debug endpoint confirmation tokens (generate unique random strings)
# Generate: openssl rand -hex 16
DEBUG_RESET_TOKEN=
DEBUG_CLEANUP_TOKEN=

# ----- Admin (Required) -----
ADMIN_USERNAMES=your-username

# ----- Feature Flags -----
# Set to true to hide unfinished routes behind a redirect
NEXT_PUBLIC_SITE_LOCKED=false

# ----- Optional -----
NEXT_PUBLIC_VERCEL_ANALYTICS_ID=