vets-who-code-app/.env.example at master · Vets-Who-Code/vets-who-code-app · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
# Database
# For local development, use SQLite:
# DATABASE_URL="file:./dev.db"
# For production, use PostgreSQL (Vercel Postgres, Railway, Supabase, etc.):
DATABASE_URL="postgresql://username:password@hostname:port/database"

# LMS Development Access - Set to 'true' to bypass auth in development ONLY
# WARNING: Never enable in production!
LMS_DEV_BYPASS=false

# NextAuth.js
NEXTAUTH_SECRET="your-secret-key-here"
NEXTAUTH_URL="http://localhost:3000"

# GitHub OAuth (for authentication)
GITHUB_CLIENT_ID="your-github-client-id"
GITHUB_CLIENT_SECRET="your-github-client-secret"

# GitHub API Access (for fetching org data, repos, etc.)
GITHUB_PAT="your-github-personal-access-token"
GITHUB_TOKEN="your-github-token"
GITHUB_ORG="Vets-Who-Code"

# Admin allowlist — comma-separated GitHub usernames that bypass org-membership
# check on sign-in. Keep this list minimal (founders/external admins only).
ADMIN_GITHUB_LOGINS=""

# Dev-only escape hatch. Set to "true" ONLY when running locally with
# NODE_ENV=development to allow any GitHub user to sign in. NEVER set in
# production or preview deployments.
ALLOW_ANY_GITHUB_USER="false"

# Google Maps API (for location features)
NEXT_PUBLIC_GOOGLE_MAPS_KEY="your-google-maps-api-key"

# Optional: Other OAuth providers
# GOOGLE_CLIENT_ID="your-google-client-id"
# GOOGLE_CLIENT_SECRET="your-google-client-secret"

# AI Teaching Assistant (J0d!e) - Phase 5
# Primary AI provider: gemini | azure | openai | phi3
PRIMARY_AI_PROVIDER="gemini"

# Google Gemini (recommended for cost-effectiveness)
GOOGLE_GENERATIVE_AI_API_KEY="your-google-ai-api-key"

# Contact Form Spam Filter (Gemini)
GEMINI_API_KEY="your-gemini-api-key"
GEMINI_MODEL="gemini-2.5-flash"

# Azure OpenAI (GPT-4)
AZURE_OPENAI_API_KEY="your-azure-openai-key"
AZURE_OPENAI_ENDPOINT="https://your-resource.openai.azure.com"
AZURE_OPENAI_DEPLOYMENT="your-gpt4-deployment-name"

# OpenAI (GPT-4)
OPENAI_API_KEY="your-openai-api-key"

# Phi-3 (optional - for local/Azure AI Studio deployment)
PHI3_ENDPOINT="your-phi3-endpoint"
PHI3_API_KEY="your-phi3-api-key"

# Shopify Storefront API (for browsing products/cart)
SHOPIFY_STORE_DOMAIN="your-store.myshopify.com"
SHOPIFY_STOREFRONT_ACCESS_TOKEN="your-storefront-access-token"

# Shopify Admin API (optional - for making API calls to Shopify)
SHOPIFY_ADMIN_ACCESS_TOKEN="your-admin-access-token"

# Shopify Webhook/API Secrets (REQUIRED for order webhooks - the API Secret Key from API credentials)
# The webhook handler will check for any of these names:
SHOPIFY_WEBHOOK_SECRET="your-webhook-secret"     # Primary option
SHOPIFY_API_SECRET="your-api-secret-key"         # Alternative name
SHOPIFY_CLIENT_SECRET="your-client-secret"       # Alternative name

# Cloudinary (for image uploads and management)
NEXT_PUBLIC_CLOUDINARY_CLOUD_NAME="your-cloud-name"
CLOUDINARY_API_KEY="your-api-key"
CLOUDINARY_API_SECRET="your-api-secret"

# Email Service (Resend - for sending certificate emails)
RESEND_API_KEY="your-resend-api-key"
EMAIL_FROM="noreply@vetswhocode.io"  # Optional: Custom from address (requires domain verification)

# J0dI3 AI Backend (server-side only — never prefix with NEXT_PUBLIC_)
J0DI3_API_URL=
J0DI3_API_KEY=