.env.example

# App
# Required in production. Use your deployed app origin, e.g. https://callbackcloser.com
NEXT_PUBLIC_APP_URL=

# Database (Postgres)
DATABASE_URL=
DIRECT_DATABASE_URL=

# Clerk
# Required in production
# For local development, use Clerk test/dev keys that allow localhost redirects.
# Production-domain-restricted keys can trigger browser console origin errors on http://localhost:3000.
NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY=
CLERK_SECRET_KEY=
NEXT_PUBLIC_CLERK_SIGN_IN_URL=/sign-in
NEXT_PUBLIC_CLERK_SIGN_UP_URL=/sign-up
# Optional comma-separated admin emails allowed into /admin
ADMIN_EMAIL_ALLOWLIST=

# Stripe
# Required in production
NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY=
STRIPE_SECRET_KEY=
STRIPE_WEBHOOK_SECRET=
STRIPE_PRICE_STARTER=
STRIPE_PRICE_PRO=

# Twilio
# Parent account credentials used to create business subaccounts, provision numbers,
# create Messaging Services, and validate parent/subaccount webhook signatures.
TWILIO_ACCOUNT_SID=
TWILIO_AUTH_TOKEN=
# Optional for local/non-production token-mode webhook testing only
TWILIO_WEBHOOK_AUTH_TOKEN=
# Must be true in production. CallbackCloser fails closed otherwise.
TWILIO_VALIDATE_SIGNATURE=

# Optional debug / demo
DEBUG_ENV_ENDPOINT_TOKEN=
PORTFOLIO_DEMO_MODE=
# Break-glass only: allows demo mode in production when explicitly set
ALLOW_PRODUCTION_DEMO_MODE=
# Founder-only smoke test billing override (do not enable for customer accounts)
ALLOW_FOUNDER_BILLING_BYPASS=
FOUNDER_CLERK_USER_ID=

# Optional email delivery
RESEND_API_KEY=
CALLBACKCLOSER_FROM_EMAIL=

# Optional legacy backend simulator tooling
# The current public /simulator page is self-contained and does not require these values.
ENABLE_PUBLIC_MISSED_CALL_SIMULATOR=
SIMULATOR_BUSINESS_ID=
ENABLE_PUBLIC_SIMULATOR_REAL_SMS=

# Optional rate limiting (defaults are safe for provider webhooks)
# RATE_LIMIT_WINDOW_MS=60000
# RATE_LIMIT_TWILIO_AUTH_MAX=240
# RATE_LIMIT_TWILIO_UNAUTH_MAX=40
# RATE_LIMIT_STRIPE_AUTH_MAX=240
# RATE_LIMIT_STRIPE_UNAUTH_MAX=40
# RATE_LIMIT_PROTECTED_API_MAX=80

# Optional observability + alerting
# ALERT_WEBHOOK_URL=
# ALERT_WEBHOOK_TOKEN=
# ALERT_WEBHOOK_TIMEOUT_MS=4000

# Optional provider parity checks
# TWILIO_WEBHOOK_VOICE_URL=
# TWILIO_WEBHOOK_SMS_URL=
# TWILIO_WEBHOOK_STATUS_URL=

# Vercel system envs (auto-set on Vercel; optional locally for fallback testing only)
# VERCEL_ENV=
# VERCEL_URL=
# VERCEL_PROJECT_PRODUCTION_URL=