# .env

# jwt secret for self-hosted auth sessions (generate with: openssl rand -hex 32)
AUTH_JWT_SECRET=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

# postgres db url (self-hosted, e.g. postgresql://user:password@localhost:5432/waseel)
DATABASE_URL="postgresql://username:password@hostname:port/waseel"

# expo api server url (you can set it to any random url for development)
EXPO_PUBLIC_SERVER_URL="https://example.com/"

# google oauth client ids (from Google Cloud console, type "Web/iOS/Android")
EXPO_PUBLIC_GOOGLE_AUTH_WEB_CLIENT_ID=XXXXXXXX.apps.googleusercontent.com
EXPO_PUBLIC_GOOGLE_AUTH_IOS_CLIENT_ID=XXXXXXXX.apps.googleusercontent.com
EXPO_PUBLIC_GOOGLE_AUTH_ANDROID_CLIENT_ID=XXXXXXXX.apps.googleusercontent.com

# gmail smtp (app password, needs 2-step verification; leave blank to log codes to server console)
# host/port are optional -- default to smtp.gmail.com:465, use 587 if 465 is blocked
SMTP_HOST=smtp.gmail.com
SMTP_PORT=465
SMTP_USER=you@gmail.com
SMTP_PASS=your-16-char-app-password
SMTP_FROM="Waseel <you@gmail.com>"

# geoapify api key (static map tiles only)
EXPO_PUBLIC_GEOAPIFY_API_KEY=XXXXXXXXXXXXXXXXXXXXXXXXXXXXX

# google api key — powers Places autocomplete, Places Nearby Search
# (mall/hospital/pharmacy/restaurant chips), and the per-marker Directions
# ETA/fare estimates. Note: this key is embedded in the client bundle.
EXPO_PUBLIC_GOOGLE_API_KEY=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

# google cloud vision — reads a new driver's licence, ID card and vehicle
# registration at onboarding so the credential fields prefill themselves.
# SERVER-SIDE ONLY: no EXPO_PUBLIC_ prefix, so it is never bundled into the
# app. Enable the Cloud Vision API on the project and restrict the key to it.
# Leaving this unset does not break onboarding — scans are still stored for the
# reviewer, the driver just types the details in by hand.
GOOGLE_VISION_API_KEY=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

# where driver uploads are written. Defaults to ./.uploads next to the app,
# with two subdirectories: driver-documents/ (licence, ID and vehicle
# registration scans) and driver-photos/ (the profile photo riders see).
# Point this at a persistent volume in production — a redeploy that wipes it
# leaves reviewers with no documents to check against and every driver without
# a face. Never serve this directory statically: scans are read back only
# through the authenticated /(api)/driver/documents route, and photos only
# through /(api)/driver/photo, which serves a name no driver row references.
UPLOAD_DIR=

# areeba payment gateway (credentials issued after merchant onboarding)
AREEBA_API_BASE_URL="https://your-gateway-host.areeba.com"
AREEBA_MERCHANT_ID=XXXXXXXXXXXX
AREEBA_API_PASSWORD=XXXXXXXXXXXXXXXXXXXXXXXXXXXXX
AREEBA_API_VERSION=100

# admin dashboard origin(s) for CORS (lib/admin.ts). Comma-separated, so dev
# and production can both be listed. FAILS CLOSED: when unset, no
# Access-Control-Allow-Origin header is sent at all and browsers block
# cross-origin calls to the owner API — set it explicitly. "*" still works if
# you deliberately want a wildcard, but it is no longer what you get by
# forgetting to configure this.
ADMIN_CORS_ORIGIN=http://localhost:5173

# in-app WebRTC audio calls (STUN for dev; TURN mandatory for production NAT).
# Leave TURN_* blank for development — STUN-only works on the same LAN.
EXPO_PUBLIC_STUN_URL="stun:stun.l.google.com:19302"
EXPO_PUBLIC_TURN_URL=""
EXPO_PUBLIC_TURN_USERNAME=""
EXPO_PUBLIC_TURN_CREDENTIAL=""