.env.example

# WorkWell Measure Studio environment template
# Copy to environment-specific secret stores; do not commit real values.

# Backend runtime (MIE container)
DATABASE_URL=
DATABASE_URL_DIRECT=
OPENAI_API_KEY=
SPRING_PROFILES_ACTIVE=prod
WORKWELL_AUTH_ENABLED=true
WORKWELL_AUTH_JWT_SECRET=replace-with-a-strong-random-secret-at-least-32-characters
# The frontend and backend run on split origins (twh.os.mieweb.org / twh-api.os.mieweb.org),
# so the refresh cookie must be SameSite=None + Secure or the browser never sends it on the
# /api/auth/refresh fetch (silent refresh fails, users get logged out on reload).
# Production startup fails fast if these are not set to None/true.
WORKWELL_AUTH_COOKIE_SAME_SITE=None
WORKWELL_AUTH_COOKIE_SECURE=true
WORKWELL_CORS_ALLOWED_ORIGINS=https://twh.os.mieweb.org
WORKWELL_DEMO_ENABLED=false
WORKWELL_DEMO_ALLOW_PUBLIC_DEMO=false
# Optional safety override if a deployment does not use Spring profiles:
# WORKWELL_ENVIRONMENT=production

# Frontend (MIE container)
NEXT_PUBLIC_API_BASE_URL=
NEXT_PUBLIC_APP_NAME=WorkWell Measure Studio
NEXT_PUBLIC_DEMO_MODE=false
# Keep this false in production builds. The frontend build fails if it is set to true.