# Required
DATABASE_URL=""
REDIS_URL=""
PUBLIC_SERVER_URL=""

TRUSTED_ORIGINS=""
BETTER_AUTH_SECRET=""

AUTH_BEARER_TOKEN=""
AUTH_COOKIE_DOMAIN=""

SMTP_HOST=""
SMTP_PORT=""
SMTP_USER=""
SMTP_SENDER=""
SMTP_PASSWORD=""

# Optional - MinIO (S3-compatible, for Docker / on-premise self-hosting)
# When API runs in Docker: use http://minio:9000. For local API: use http://localhost:9000
MINIO_ROOT_USER=""
MINIO_ROOT_PASSWORD=""
OBJECT_STORAGE_ENDPOINT=""
OBJECT_STORAGE_PUBLIC_ENDPOINT=""
OBJECT_STORAGE_ACCESS_KEY_ID=""
OBJECT_STORAGE_SECRET_ACCESS_KEY=""
OBJECT_STORAGE_FORCE_PATH_STYLE=""
OBJECT_STORAGE_MEDIA_PUBLIC_BASE_URL=""

# Optional - Cloudflare R2 (for hosted deployments)
CLOUDFLARE_BUCKET_ID=""
CLOUDFLARE_ACCESS_KEY=""
CLOUDFLARE_ACCOUNT_ID=""
CLOUDFLARE_BUCKET_DOMAIN=""
CLOUDFLARE_SECRET_ACCESS_KEY=""
SENTRY_DNS=""

# Enterprise (Optional)
# Required only when using Enterprise-only features (SSO, token-auth, no-tracking)
LICENSE_KEY=""

# SSO (Optional)
# For enterprise SSO with SAML (future support)
# SSO_ENCRYPTION_KEY="your-32-character-secret-key"

# AI Assistant (Optional)
# Per-provider API keys. The dashboard model picker exposes Gemini 3 Flash
# (Google) and GPT-4o (OpenAI). Anthropic is supported in code but not in the
# picker UI. Set at least one key to enable the assistant.
OPENAI_API_KEY=""
GOOGLE_API_KEY=""
ANTHROPIC_API_KEY=""

# Tinybird event tracking for AI observability (optional — silently skipped when not set)
# TINYBIRD_TOKEN=""
# TINYBIRD_BASE_URL="https://api.tinybird.co"