.env.example

# Redis configuration
REDIS_HOST=localhost
REDIS_PORT=6379

# Application environment (development, staging, production)
ENVIRONMENT=development

# Maximum allowed file upload size in megabytes
MAX_FILE_SIZE_MB=20

# Number of allowed requests per minute for rate limiting
RATE_LIMIT_PER_MINUTE=10

# Time-to-live for temporary download URLs in seconds
TEMP_URL_TTL_SECONDS=300

# ── Accounts, history & OAuth (all optional) ──────────────────────────
# CoreTex runs fine as a stateless converter with everything below unset.
# Filling these in activates email/password sign-in, conversion history,
# and Google / GitHub OAuth. A provider's button only appears on /login
# once BOTH its CLIENT_ID and CLIENT_SECRET are set (see /auth/providers).

# Postgres connection string. REQUIRED for any auth — including Google and
# GitHub OAuth, whose callbacks create/link the user row here — and for
# history. Railway provides ${{Postgres.DATABASE_URL}}. Empty = auth off.
DATABASE_URL=

# Secret used to sign JWT session tokens. REQUIRED for auth.
# Generate one with:  openssl rand -hex 32
JWT_SECRET=
# Optional JWT tuning (defaults shown — leave commented to use them).
# JWT_ALGORITHM=HS256
# JWT_EXPIRES_HOURS=168

# Google OAuth — create an "OAuth client ID" (type: Web application) at
# https://console.cloud.google.com/apis/credentials
# Authorised redirect URI must exactly match:
#   <OAUTH_REDIRECT_BASE>/auth/google/callback
GOOGLE_OAUTH_CLIENT_ID=
GOOGLE_OAUTH_CLIENT_SECRET=

# GitHub OAuth — create a "New OAuth App" at
# https://github.com/settings/developers
# Authorization callback URL must exactly match:
#   <OAUTH_REDIRECT_BASE>/auth/github/callback
GITHUB_OAUTH_CLIENT_ID=
GITHUB_OAUTH_CLIENT_SECRET=

# Base URL the OAuth provider redirects back to (this backend). Must match
# the redirect/callback URL registered with each provider above.
# Prod example: https://coretex-production.up.railway.app
OAUTH_REDIRECT_BASE=http://localhost:8000

# Where the backend bounces the browser after a successful OAuth login —
# your frontend's origin. The JWT is appended as #token=... on /auth/callback.
FRONTEND_URL=http://localhost:5173

# ── CORS / deployment (optional) ──────────────────────────────────────
# Extra allowed browser origins (comma-separated) on top of localhost:5173.
# Set to your deployed frontend, e.g. https://coretex.vercel.app
ALLOWED_ORIGINS=

# Production Redis URL (Railway provides ${{Redis.REDIS_URL}}). When set,
# it takes precedence over REDIS_HOST / REDIS_PORT above.
REDIS_URL=