# WealthySmart environment template.
# Copy to .env for local development. Production values live in Gitea Actions
# secrets and are written to .env.prod by .github/workflows/deploy.yml on every
# deploy — new variables must be added BOTH there and here.

# ── Database (dev compose; must match the wealthysmart-db-dev volume) ────────
POSTGRES_USER=wealthy_user
POSTGRES_PASSWORD=wealthy_pass
POSTGRES_DB=wealthysmart

# ── Auth (REQUIRED — the backend refuses to boot without these) ──────────────
# Generate with: openssl rand -hex 32
SECRET_KEY=
ADMIN_USERNAME=admin
# Must not be "admin".
ADMIN_PASSWORD=
# Cookies require HTTPS when true. Set false for local HTTP development.
COOKIE_SECURE=false

# ── Push notifications (optional in dev) ─────────────────────────────────────
VAPID_PRIVATE_KEY=
VAPID_PUBLIC_KEY=

# ── AI agent (optional in dev; Asistente won't work without it) ──────────────
OPENAI_API_KEY=
AGENT_MODEL=gpt-5.4-mini