# .env

# jwt secret for self-hosted auth sessions (generate with: openssl rand -hex 32)
AUTH_JWT_SECRET=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

# postgres db url (self-hosted, e.g. postgresql://user:password@localhost:5432/waseel)
DATABASE_URL="postgresql://username:password@hostname:port/waseel"

# expo api server url (you can set it to any random url for development)
EXPO_PUBLIC_SERVER_URL="https://example.com/"

# google oauth client ids (from Google Cloud console, type "Web/iOS/Android")
EXPO_PUBLIC_GOOGLE_AUTH_WEB_CLIENT_ID=XXXXXXXX.apps.googleusercontent.com
EXPO_PUBLIC_GOOGLE_AUTH_IOS_CLIENT_ID=XXXXXXXX.apps.googleusercontent.com
EXPO_PUBLIC_GOOGLE_AUTH_ANDROID_CLIENT_ID=XXXXXXXX.apps.googleusercontent.com

# gmail smtp (app password, needs 2-step verification; leave blank to log codes to server console)
# host/port are optional -- default to smtp.gmail.com:465, use 587 if 465 is blocked
SMTP_HOST=smtp.gmail.com
SMTP_PORT=465
SMTP_USER=you@gmail.com
SMTP_PASS=your-16-char-app-password
SMTP_FROM="Waseel <you@gmail.com>"

# geoapify api key (static map tiles only)
EXPO_PUBLIC_GEOAPIFY_API_KEY=XXXXXXXXXXXXXXXXXXXXXXXXXXXXX

# google api key — powers Places autocomplete, Places Nearby Search
# (mall/hospital/pharmacy/restaurant chips), and the per-marker Directions
# ETA/fare estimates. Note: this key is embedded in the client bundle.
EXPO_PUBLIC_GOOGLE_API_KEY=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

# areeba payment gateway (credentials issued after merchant onboarding)
AREEBA_API_BASE_URL="https://your-gateway-host.areeba.com"
AREEBA_MERCHANT_ID=XXXXXXXXXXXX
AREEBA_API_PASSWORD=XXXXXXXXXXXXXXXXXXXXXXXXXXXXX
AREEBA_API_VERSION=100

# admin dashboard origin for CORS (lib/admin.ts); defaults to * when unset
ADMIN_CORS_ORIGIN=*