# ─── App ─────────────────────────────────────────────────────────────
APP_ENV=development
APP_NAME=APILINE
APP_URL=https://dev.rapi.my.id/
HOST=0.0.0.0
PORT=7777
LOG_LEVEL=debug

# ─── Database ────────────────────────────────────────────────────────
# PostgreSQL (pgx). Fresh database, tanpa suffix Prisma.
# Port 55432 dipakai agar tidak bentrok dengan project lain di mesin dev.
# DATABASE_URL=postgresql://postgres:postgres@localhost:5432/apiline
DATABASE_URL=postgresql://rapimy_apiline_user:rapimy_apiline_pass@127.0.0.200/rapimy_apiline_db
# ─── Redis ───────────────────────────────────────────────────────────
# REDIS_URL=redis://localhost:56379
REDIS_URL=/home/rapimy/redis/redis.sock
# local | staging | prod — prefix semua key (via rk())
REDIS_PROFILE=local

# ─── Crypto & Session ────────────────────────────────────────────────
# AES-256-GCM key versioned. Format: v1:<64 hex>,v2:<64 hex>
# Buat dengan: openssl rand -hex 32
ENCRYPTION_KEYS=v1:0000000000000000000000000000000000000000000000000000000000000000
ENCRYPTION_ACTIVE_KEY=v1
# HMAC key cookie sesi. Kosong → fallback ke key enkripsi aktif.
SESSION_SECRET=
# Secure flag cookie. Kosong → ikut APP_ENV (ON di production).
AUTH_COOKIE_SECURE=

# ─── Auth ────────────────────────────────────────────────────────────
# Clerk HANYA untuk registrasi + sinkronisasi user. Login ditangani internal.
CLERK_PUBLISHABLE_KEY=
CLERK_SECRET_KEY=
CLERK_WEBHOOK_SIGNING_SECRET=
# Dev bypass — guard keras APP_ENV != production
DEV_AUTH_BYPASS=false
DEV_AUTH_BYPASS_EMAIL=admin@apiline.local

# ─── Feature flags ───────────────────────────────────────────────────
RATE_LIMIT_VIOLATION_LOG=true

# ─── Cron ────────────────────────────────────────────────────────────
# Bearer token untuk endpoint cron. Kosong = dev mode (tanpa auth).
CRON_SECRET=

# ─── Payment (Fase 7) ────────────────────────────────────────────────
PAKASIR_API_KEY=
PAKASIR_BASE_URL=https://pakasir.zone.id
LEMONSQUEEZY_API_KEY=
LEMONSQUEEZY_STORE_ID=
LEMONSQUEEZY_WEBHOOK_SECRET=
