Files

77 lines
4.5 KiB
Bash
Raw Permalink Normal View History

2026-04-26 02:42:42 -04:00
# ─────────────────────────────────────────────
# Server
# ─────────────────────────────────────────────
NODE_ENV=development
PORT=8080
PUBLIC_URL=http://localhost:8080
COOKIE_DOMAIN=
# 32+ random bytes, hex. Generate: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
SESSION_SECRET=replace-me-with-32-byte-hex
CSRF_SECRET=replace-me-with-32-byte-hex
# Comma-separated emails. Any user with one of these emails is auto-promoted to superadmin
# on login/signup and gains access to /admin.
SUPERADMIN_EMAILS=
# ─────────────────────────────────────────────
# DigitalOcean Managed Postgres
# ─────────────────────────────────────────────
# Format: postgresql://user:pass@host:25060/dbname?sslmode=require
DATABASE_URL=postgresql://doadmin:password@db-postgresql-nyc1-xxxxx.b.db.ondigitalocean.com:25060/defaultdb?sslmode=require
DATABASE_CA_CERT_PATH=./certs/do-ca.crt
# ─────────────────────────────────────────────
# Object storage — DigitalOcean Spaces (S3-compatible). Sole storage backend (required).
# Create a Space + access keys in the DO console. Endpoint is the REGION endpoint
# (no bucket prefix); the SDK adds the bucket as a virtual host.
2026-04-26 02:42:42 -04:00
# ─────────────────────────────────────────────
SPACES_ENDPOINT=https://nyc3.digitaloceanspaces.com
SPACES_REGION=nyc3
SPACES_BUCKET=elegalsoftware
SPACES_KEY=
SPACES_SECRET=
# Optional CDN/base URL for public objects; leave blank to serve everything through the API.
SPACES_PUBLIC_BASE=
# Legacy local path — only read by scripts/migrate-storage-to-spaces.ts during a one-time migration.
STORAGE_PATH=./storage
2026-04-26 02:42:42 -04:00
# ─────────────────────────────────────────────
# Email (SMTP2GO) — sends all platform email via the HTTP API.
# Create an API key in the SMTP2GO dashboard (Settings → API Keys).
# EMAIL_FROM's domain must be a verified sender domain in SMTP2GO.
# Leave the key blank in dev to log emails instead of sending.
2026-04-26 02:42:42 -04:00
# ─────────────────────────────────────────────
SMTP2GO_API_KEY=
2026-04-26 02:42:42 -04:00
EMAIL_FROM="eLegal Software <noreply@yourdomain.com>"
# ─────────────────────────────────────────────
# AI (Anthropic) — powers case summaries, document summaries, and text polish.
# Leave blank to disable AI features (endpoints return 503 ai_not_configured).
# ─────────────────────────────────────────────
ANTHROPIC_API_KEY=
# ─────────────────────────────────────────────
# Cloudflare Turnstile — bot protection on signup, login, password reset, and the
# contact form. Leave both blank to disable (dev). The site key is public (bundled
# into the web app); the secret key is server-only.
# ─────────────────────────────────────────────
TURNSTILE_SECRET_KEY=
VITE_TURNSTILE_SITE_KEY=
2026-04-26 02:42:42 -04:00
# ─────────────────────────────────────────────
# Stripe
# ─────────────────────────────────────────────
STRIPE_SECRET_KEY=
STRIPE_WEBHOOK_SECRET=
STRIPE_PRICE_PRO=
STRIPE_PRICE_LIFETIME=
# ─────────────────────────────────────────────
# Sentry (optional — leave blank to disable error reporting)
# ─────────────────────────────────────────────
SENTRY_DSN_API=
# Web DSN must be exposed to the browser bundle, so prefix with VITE_
VITE_SENTRY_DSN=