############################################################
# MC Cars - self-hosted Supabase + web
# Dev defaults. ROTATE EVERY SECRET before any non-local deploy.
############################################################

# ---- Postgres ----
POSTGRES_HOST=db
POSTGRES_DB=postgres
POSTGRES_PORT=5432
POSTGRES_PASSWORD=mc-cars-local-postgres-password

# ---- JWT ----
# Well-known demo values from Supabase self-hosting guide (local-only).
# Replace with values generated from JWT_SECRET on any real deployment.
JWT_SECRET=super-secret-jwt-token-with-at-least-32-characters-long
JWT_EXPIRY=3600
ANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6ImFub24iLCJleHAiOjE5ODM4MTI5OTZ9.CRXP1A7WOeoJeXxjNni43kdQwgnWNReilDMblYTn_I0
SERVICE_ROLE_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hdp7fsn3W0YpN81IU

# ---- Studio basic-auth (behind Kong) ----
DASHBOARD_USERNAME=supabase
DASHBOARD_PASSWORD=mc-cars-studio

# ---- Public URLs (as seen from the browser) ----
# Only two URLs to change between local dev and production:
#   Local:  http://localhost:55580  /  http://localhost:55521
#   NAS:    https://demo.lago.dev   /  https://demo.lago.dev
SITE_URL=http://localhost:55580
SUPABASE_PUBLIC_URL=http://localhost:55521

# ---- GoTrue (Auth) ----
# API_EXTERNAL_URL, GOTRUE_SITE_URL, GOTRUE_URI_ALLOW_LIST are derived
# automatically from SITE_URL / SUPABASE_PUBLIC_URL in docker-compose.yml.
DISABLE_SIGNUP=true
ENABLE_EMAIL_SIGNUP=true
ENABLE_EMAIL_AUTOCONFIRM=true
ENABLE_ANONYMOUS_USERS=false

# ---- SMTP / IMAP (MC Cars mailbox) ----
SMTP_HOST=heracles.mxrouting.net
SMTP_PORT=587
SMTP_USER=office@mc-cars.at
SMTP_PASS=fhXTcjWMRpSLYYzXJsN8

IMAP_HOST=heracles.mxrouting.net
IMAP_PORT=993
IMAP_USER=office@mc-cars.at
IMAP_PASS=fhXTcjWMRpSLYYzXJsN8

POP3_HOST=heracles.mxrouting.net
POP3_PORT=995
POP3_USER=office@mc-cars.at
POP3_PASS=fhXTcjWMRpSLYYzXJsN8

# ---- Admin BOOTSTRAP credentials (seeded on first DB init) ----
# The user is flagged must_change_password=true. The REAL working password
# is set by the admin via the UI on first login and never equals this seed.
ADMIN_EMAIL=admin@mccars.local
ADMIN_PASSWORD=mc-cars-admin

# ---- Storage ----
STORAGE_BACKEND=file
FILE_SIZE_LIMIT=52428800

# ---- n8n ----
N8N_ENCRYPTION_KEY=mc-cars-n8n-encryption-key-change-me
N8N_USER_EMAIL=admin@mccars.local
N8N_USER_PASSWORD=McCars-N8n-Admin1
N8N_WEBHOOK_URL=http://localhost:55521/webhook/manual-email-send
N8N_POSTGRES_CREDENTIAL_ID=AWozEaiOSymMj7JF
N8N_POSTGRES_CREDENTIAL_NAME=Postgres account
N8N_SMTP_CREDENTIAL_ID=nRMemi1sz2C0N4Vu
N8N_SMTP_CREDENTIAL_NAME=SMTP account
N8N_SMTP_HOST=heracles.mxrouting.net
N8N_SMTP_USER=office@mc-cars.at
N8N_SMTP_PASS=fhXTcjWMRpSLYYzXJsN8
N8N_PAYPAL_KAUTION_LINK=https://www.google.at
N8N_PAYPAL_MIETE_LINK=https://www.google.at
N8N_PAYMENT_WORKFLOW_ID=rI1gUpcRXSikxWhh