.env.example

# auth-engine-data — copy to .env.local before seeding
# cp .env.example .env.local
#
# SECRET_KEY must match auth-engine / compose SECRET_KEY when seeding platform config.

# ── Against local Docker Compose (auth-engine-infra/compose) ───────────────────
# Postgres is exposed on localhost:5432 when compose is running.
POSTGRES_URL=postgresql+asyncpg://authengine:authengine_local_pass@localhost:5432/authengine
POSTGRES_POOL_SIZE=5
POSTGRES_MAX_OVERFLOW=5
POSTGRES_SSL=False

SECRET_KEY=change-me-min-32-chars-random-secret-key
SUPERADMIN_EMAIL=admin@example.com
SUPERADMIN_PASSWORD=ChangeThisStrongPassword123!

# ── Against Kubernetes / remote Postgres ────────────────────────────────────────
# POSTGRES_URL=postgresql+asyncpg://postgres:PASSWORD@postgres-service:5432/authengine
# POSTGRES_SSL=False

# ── One-time platform tenant seed (optional) ──────────────────────────────────
# Used by: auth-engine-data all  |  auth-engine-data platform-config
# PASSWORD_MIN_LENGTH=8
# PASSWORD_REQUIRE_UPPERCASE=True
# PASSWORD_REQUIRE_LOWERCASE=True
# PASSWORD_REQUIRE_DIGIT=True
# PASSWORD_REQUIRE_SPECIAL=True
#
# Email — Resend recommended
# EMAIL_PROVIDER=resend
# EMAIL_PROVIDER_API_KEY=re_...
# EMAIL_SENDER=noreply@authengine.org
#
# Email — Amazon SES (if using AWS SES instead of Resend)
# EMAIL_PROVIDER=ses
# EMAIL_PROVIDER_API_KEY=
# EMAIL_SENDER=noreply@authengine.org
# SMS_PROVIDER=android_gateway
# SMS_GATEWAY_URL=https://api.sms-gate.app/3rdparty/v1
# SMS_GATEWAY_USERNAME=
# SMS_GATEWAY_PASSWORD=
# GOOGLE_CLIENT_ID=
# GOOGLE_CLIENT_SECRET=
# GOOGLE_REDIRECT_URI=http://localhost:3000/oauth/google/callback
# AUTHENGINE_BASE_URL=http://localhost:8000
# AUTHENGINE_CLIENT_ID=
# AUTHENGINE_CLIENT_SECRET=
# AUTHENGINE_REDIRECT_URI=http://localhost:3000/oauth/authengine/callback