.env.example

# Copy this file to .env.local for development. Never commit .env.local.

# Canonical origin. Production requires the exact HTTPS origin, with no path.
APP_URL=http://localhost:3000

# Supabase project API settings. The service-role value is server-only.
NEXT_PUBLIC_SUPABASE_URL=
NEXT_PUBLIC_SUPABASE_ANON_KEY=
SUPABASE_SERVICE_ROLE_KEY=

# YouCam server API credential. Never expose it through a NEXT_PUBLIC_ variable.
YOUCAM_API_KEY=

# Comma-separated exact hostnames (or leading-wildcard subdomains) observed in
# verified YouCam T3/T4 result URLs. The value below is the exact US result host
# observed on 2026-08-03; add only other official regional hosts you observe live.
# Required in production. Do not use a bare "*" and do not include schemes or paths.
YOUCAM_RESULT_HOSTS=yce-us.s3-accelerate.amazonaws.com

# Random, server-only bearer secret used by Vercel Cron. Use at least 32 random bytes.
CRON_SECRET=

# Monitored address shown in the privacy notice. Required for a public deployment.
PRIVACY_CONTACT_EMAIL=