.env.local.example

# Database (Docker MySQL)
# Use 127.0.0.1 instead of localhost for cross-platform compatibility (IPv6 issues on macOS)
DATABASE_URL="mysql://prfc_user:prfc_password@127.0.0.1:3306/prfc_portal"

# Docker MySQL Configuration
MYSQL_ROOT_PASSWORD=rootpassword
MYSQL_DATABASE=prfc_portal
MYSQL_USER=prfc_user
MYSQL_PASSWORD=prfc_password

# Email (Resend HTTP API)
# RESEND_API_KEY=re_your_api_key_here
FROM_EMAIL=noreply@example.com

# Token Authentication (shared secret with PRFC portal)
# Not required for local dev - uses built-in dev secret
# PRFC_PORTAL_SECRET=your-32-char-minimum-secret-here

# Email Feature Flag (disabled by default)
EMAIL_ENABLED=false
# When set, all emails redirect to this address instead of real recipients
# EMAIL_REDIRECT_TO=your-test-email@example.com

# SMS Feature Flag (disabled by default for MVP)
SMS_ENABLED=false

# Staging Mode (allows mock portal access when NODE_ENV=production)
STAGING=false
STAGING_USERNAME=admin
STAGING_PASSWORD=your-staging-password

# Member Portal API Integration
# Set to true for local development with mock data
# Set to false for production with real Member Portal API
USE_MOCK_MEMBER_API=true

# Email Unsubscribe Token Secret (32 characters minimum)
UNSUBSCRIBE_SECRET=your-32-character-secret-here-change-in-production

# Field-Level Encryption Keys (64-char hex strings, 256-bit)
# Generate with: openssl rand -hex 32
FIELD_ENCRYPTION_KEY=your-64-char-hex-key-here
BLIND_INDEX_KEY=your-64-char-hex-key-here

# Application Base URL (for generating unsubscribe links)
APP_URL=http://localhost:3000

# Rate Limiting (Upstash Redis)
UPSTASH_REDIS_REST_URL=https://your-instance.upstash.io
UPSTASH_REDIS_REST_TOKEN=your-token

# Vercel Blob (profile photos)
# Required in Vercel production. Optional locally if you do not exercise photo upload.
# BLOB_READ_WRITE_TOKEN=vercel_blob_rw_xxx