.env.example

# Connection string for the local Postgres where the handbook data lives.
# Homebrew Postgres on macOS uses your OS user with trust auth, so no password
# is needed; adjust for other setups. See CLAUDE.md §1 — this file lives at
# the repo root, not per-package.
DATABASE_URL=postgres://localhost:5432/monmap

# ---- Better Auth ----
# Server-side secret used to sign session tokens. Rotate by replacing
# this value (will invalidate all active sessions). Required.
BETTER_AUTH_SECRET=

# Public origin where the app is reachable. Optional locally; on Vercel
# the lib/auth.ts fallback derives it from VERCEL_URL. Set it explicitly
# in production (custom domain) so OAuth redirects don't bounce through
# the autogenerated *.vercel.app hostname.
# BETTER_AUTH_URL=https://monmap.monashcoding.com

# ---- Google OAuth (Better Auth social provider) ----
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=

# ---- Cache revalidation ----
# Shared secret used by the ingest CLI to bust the Next.js data cache
# after refreshing handbook data. Generate with `openssl rand -hex 32`.
# Hit POST /api/revalidate-handbook with `?token=...` to clear the
# `handbook` tag everywhere.
HANDBOOK_REVALIDATE_TOKEN=

# ---- PostHog ----
# Public project token (safe to ship to the browser — PostHog API tokens
# are write-only for capture). Used by both `instrumentation-client.ts`
# and `lib/posthog-server.ts`; same value either side.
NEXT_PUBLIC_POSTHOG_PROJECT_TOKEN=
# Server-side host. The browser hits PostHog via the `/ingest/*` reverse
# proxy in next.config.mjs, so this only matters for posthog-node.
# Defaults to the US cloud when unset.
NEXT_PUBLIC_POSTHOG_HOST=https://us.i.posthog.com