.env.example

# KeyProxy environment — copy to .env.local and fill in.
# Every variable you can set is listed here. The only others the app reads are
# platform-provided: NODE_ENV, VERCEL_ENV, VERCEL_URL and
# VERCEL_PROJECT_PRODUCTION_URL.

# ── Required ────────────────────────────────────────────────────────────────

# Postgres connection string. Built for Neon (@neondatabase/serverless works
# over HTTP), but any Postgres reachable from your deployment works.
DATABASE_URL=postgres://user:password@host/dbname?sslmode=require

# Signs session cookies (HMAC-SHA256). Any long random string; rotating it
# logs everyone out. Generate one:
#   node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
SESSION_SECRET=

# ── Recommended in production ───────────────────────────────────────────────

# Shared secret for /api/cron/prune (run-log retention + expired cache
# cleanup). The route fails closed: without this set, cron calls are refused.
# Vercel cron sends it automatically as "Authorization: Bearer <CRON_SECRET>".
CRON_SECRET=

# Error monitoring. A standard Sentry DSN (https://<key>@<host>/<project>).
# Inert when empty — no SDK is bundled either way; server errors are POSTed
# to the DSN's envelope endpoint with secrets scrubbed.
SENTRY_DSN=

# ── Optional tuning ─────────────────────────────────────────────────────────

# Per-attempt upstream timeout for the pass-through proxy, in milliseconds.
# Default 30000. Waterfall steps have their own per-step timeout_ms instead.
# PROXY_ATTEMPT_TIMEOUT_MS=30000

# The app's own public URL. Only needed when the platform doesn't provide it
# (Vercel sets VERCEL_URL / VERCEL_PROJECT_PRODUCTION_URL automatically) —
# it's used to stop a provider or webhook from pointing back at the app itself.
# Both names are read and every value set counts as the app's own host, so
# set either one (or both).
# APP_URL=https://keyproxy.example.com
# NEXT_PUBLIC_APP_URL=https://keyproxy.example.com

# Dev-only request inspector at /api/debug/<configId>/<path> (shows what the
# proxy WOULD send, without a real key). Must be the exact string "true" —
# anything else leaves the route 404ing. Never enable in production.
# ENABLE_DEBUG_ROUTE=true