-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path.env.example
More file actions
116 lines (104 loc) · 5.66 KB
/
Copy path.env.example
File metadata and controls
116 lines (104 loc) · 5.66 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
# =============================================================================
# ROBOLEDGER LOCAL DEVELOPMENT ENVIRONMENT
# =============================================================================
# Template — copy to .env and fill in values for local development.
# =============================================================================
# =============================================================================
# CORE APPLICATION CONFIGURATION
# =============================================================================
NODE_ENV=development
ENVIRONMENT=dev
NEXT_PUBLIC_APP_NAME=roboledger
# =============================================================================
# FRONTEND APPLICATION URLS
# =============================================================================
# These variables are used by the SSO system and API client
# RoboSystems API URL (used by API client throughout the app)
NEXT_PUBLIC_ROBOSYSTEMS_API_URL=http://localhost:8000
# App URLs for SSO cross-application navigation
NEXT_PUBLIC_ROBOSYSTEMS_APP_URL=http://localhost:3000
NEXT_PUBLIC_ROBOLEDGER_APP_URL=http://localhost:3001
NEXT_PUBLIC_ROBOINVESTOR_APP_URL=http://localhost:3002
# =============================================================================
# AWS S3 CONFIGURATION (LOCAL DEVELOPMENT ONLY)
# =============================================================================
# Override S3 endpoint for local development with LocalStack
# Leave empty or unset for production - will use real AWS S3
# Only set this in local development environment
NEXT_PUBLIC_S3_ENDPOINT_URL=http://localhost:4566
# =============================================================================
# FEATURE TOGGLES
# =============================================================================
# Maintenance mode toggle (used in landing page)
NEXT_PUBLIC_MAINTENANCE_MODE=false
# =============================================================================
# SECURITY - CLOUDFLARE TURNSTILE CAPTCHA
# =============================================================================
# Cloudflare Turnstile provides privacy-focused CAPTCHA for forms
# Prevents spam and automated attacks on registration, contact, and waitlist forms
#
# For development:
# - Leave NEXT_PUBLIC_TURNSTILE_SITE_KEY empty to disable Turnstile
# - Or use Cloudflare's test keys:
# - 1x00000000000000000000AA (always passes)
# - 2x00000000000000000000AB (always fails)
# - 3x00000000000000000000FF (always challenges)
#
# For production:
# 1. Go to https://dash.cloudflare.com/sign-up/turnstile
# 2. Create a new site widget
# 3. Add your production domain(s) to allowed domains
# 4. Copy the site key and secret key
#
# Site key (public, used in frontend)
NEXT_PUBLIC_TURNSTILE_SITE_KEY=1x00000000000000000000AA
# Secret key (private, used for server-side validation - if needed)
TURNSTILE_SECRET_KEY=
# Whether to require CAPTCHA (auto-disabled in dev if site key is empty)
REQUIRE_CAPTCHA=false
# =============================================================================
# PUBLIC TUNNEL (OPTIONAL — for OAuth callback testing)
# =============================================================================
# Required when an OAuth provider (e.g. QuickBooks) needs a public HTTPS
# redirect URI but the rest of the app runs against localhost. Pick ONE of
# the two tunnel options below.
#
# PUBLIC_TUNNEL_DOMAIN is the public hostname (no scheme, no trailing slash).
# Read by both tunnel scripts AND next.config.js (which uses it to enable
# the dev-server API proxy + override NEXT_PUBLIC_ROBOSYSTEMS_API_URL so the
# browser only talks to one origin).
#
# In robosystems/.env, add the same value to EXTRA_CORS_ORIGINS:
# EXTRA_CORS_ORIGINS=https://<your-domain>
# Register https://<your-domain>/connections/qb-callback in the OAuth app.
# PUBLIC_TUNNEL_DOMAIN=qb.your-domain.com # cloudflared
# PUBLIC_TUNNEL_DOMAIN=your-reserved.ngrok-free.dev # ngrok
# -----------------------------------------------------------------------------
# Option A — ngrok (`npm run tunnel:ngrok`)
# -----------------------------------------------------------------------------
# Prereqs:
# 1. brew install ngrok && ngrok config add-authtoken <token>
# 2. Reserve a free static domain: https://dashboard.ngrok.com/domains
# 3. Set PUBLIC_TUNNEL_DOMAIN above to that ngrok-reserved domain.
# -----------------------------------------------------------------------------
# Option B — cloudflared (`npm run tunnel:cloudflared`)
# -----------------------------------------------------------------------------
# Use when you own a Cloudflare-managed domain. No interstitial warning page
# and you keep your own branded hostname.
# Prereqs:
# 1. brew install cloudflared && cloudflared tunnel login
# 2. Create a named tunnel + DNS route (one-time):
# cloudflared tunnel create roboledger-local
# cloudflared tunnel route dns roboledger-local qb.your-domain.com
# 3. Set PUBLIC_TUNNEL_DOMAIN above to the hostname from step 2,
# and set CLOUDFLARED_TUNNEL_NAME below to the tunnel name from step 2.
# CLOUDFLARED_TUNNEL_NAME=roboledger-local
# =============================================================================
# DEV-SERVER ALLOWED HOSTS (Next.js 16+ allowedDevOrigins) — OPTIONAL OVERRIDE
# =============================================================================
# Comma-separated hostnames allowed cross-origin access to HMR / dev resources.
# Leave empty to auto-derive from PUBLIC_TUNNEL_DOMAIN above (the common case).
# Set explicitly only when you need additional non-tunnel hosts (LAN IP,
# Tailscale, etc.) — when set, this list REPLACES the auto-derivation, so
# include the tunnel host yourself if you still want it.
# NEXT_ALLOWED_DEV_ORIGINS=