# Database (Turso / libSQL)
DATABASE_URL="libsql://your-db.turso.io"
DATABASE_AUTH_TOKEN=""

# Server
PORT=3000
NODE_ENV="development"
LOG_LEVEL="info"
APP_URL="http://localhost:3000"
# Explicit CORS origin allowlist (comma-separated, validated before use)
# Overrides/extends APP_URL for CORS. Example: VALID_CORS_ORIGINS="https://app.kordant.com,https://admin.kordant.com"
VALID_CORS_ORIGINS=""

# Auth
JWT_SECRET=""
SESSION_SECRET=""

# Clerk
CLERK_SECRET_KEY=""
VITE_CLERK_PUBLISHABLE_KEY=""

# Payments (Stripe)
STRIPE_SECRET_KEY=""
STRIPE_WEBHOOK_SECRET=""
STRIPE_PRICE_BASIC=""
STRIPE_PRICE_PLUS=""
STRIPE_PRICE_PREMIUM=""
STRIPE_PRICE_FAMILY_GUARD=""
STRIPE_PRICE_FAMILY_FORTRESS=""
STRIPE_PRICE_PLUS_MONTHLY=""
STRIPE_PRICE_PREMIUM_MONTHLY=""
VITE_STRIPE_PUBLISHABLE_KEY=""

# Email (Resend)
RESEND_API_KEY=""

# Push Notifications
FCM_PROJECT_ID=""
FCM_CLIENT_EMAIL=""
FCM_PRIVATE_KEY=""
APNS_KEY_ID=""
APNS_TEAM_ID=""
APNS_BUNDLE_ID=""
APNS_KEY=""

# SMS (Twilio)
TWILIO_ACCOUNT_SID=""
TWILIO_AUTH_TOKEN=""
TWILIO_MESSAGING_SERVICE_SID=""

# External APIs
ATTOM_API_KEY=""
HIBP_API_KEY=""
# HIBP rate limit: 1 (free tier, default) or 10 (paid tier)
HIBP_RATE_PER_SECOND=1
SECURITYTRAILS_API_KEY=""
CENSYS_API_ID=""
CENSYS_API_SECRET=""
SHODAN_API_KEY=""

# Azure Speech Services (VoicePrint / Voice Clone Detection)
# Sign up: https://azure.microsoft.com/services/cognitive-services/speech-services/
AZURE_SPEECH_KEY=""
AZURE_SPEECH_REGION="eastus"

# Monitoring
VITE_SENTRY_DSN=""

# Analytics
MIXPANEL_TOKEN=""
GA4_MEASUREMENT_ID=""

# Queue
REDIS_URL=""

# Notification Rate Limits
PUSH_RATE_LIMIT=100
EMAIL_RATE_LIMIT=60
SMS_RATE_LIMIT=30
RATE_LIMIT_WINDOW_SECONDS=60

# WebSocket
WS_PORT=3001