# briven data-plane stack — environment template for infra/datapane/compose.yml.
# Copy to .env, fill in real values, then run:
#   docker compose -f infra/datapane/compose.yml up -d

# ── Reverse proxy ───────────────────────────────────────────────────────
BRIVEN_PUBLIC_HOST=api.briven.tech
BRIVEN_PROXY_HTTP_PORT=8000
BRIVEN_PROXY_HTTPS_PORT=8443

# ── Postgres ────────────────────────────────────────────────────────────
BRIVEN_POSTGRES_DB=postgres
BRIVEN_POSTGRES_PASSWORD=replace-with-a-real-secret-min-32-chars
BRIVEN_DB_HOST_PORT=5432

# ── JWT (shared across auth / rest / realtime) ──────────────────────────
BRIVEN_JWT_SECRET=replace-with-a-real-jwt-secret-min-32-chars
BRIVEN_JWT_EXP=3600

# ── Auth (gotrue) ───────────────────────────────────────────────────────
BRIVEN_API_EXTERNAL_URL=https://api.briven.tech
BRIVEN_AUTH_SITE_URL=https://briven.tech
BRIVEN_AUTH_URI_ALLOW_LIST=
BRIVEN_AUTH_DISABLE_SIGNUP=false
BRIVEN_AUTH_EMAIL_ENABLED=true
BRIVEN_AUTH_MAILER_AUTOCONFIRM=false
BRIVEN_AUTH_SMTP_HOST=
BRIVEN_AUTH_SMTP_PORT=587
BRIVEN_AUTH_SMTP_USER=
BRIVEN_AUTH_SMTP_PASS=
BRIVEN_AUTH_SMTP_ADMIN_EMAIL=
BRIVEN_AUTH_SMTP_SENDER_NAME=briven

# ── PostgREST ───────────────────────────────────────────────────────────
BRIVEN_REST_DB_SCHEMAS=public,storage,graphql_public

# ── Realtime ────────────────────────────────────────────────────────────
BRIVEN_REALTIME_ENC_KEY=replace-with-a-real-16-byte-key
BRIVEN_REALTIME_SECRET_KEY_BASE=replace-with-a-real-64-byte-key

# ── pgBackRest backups (Cloudflare R2) — Phase 9 ────────────────────────
# Restore procedure: infra/datapane/RESTORE.md
BRIVEN_BACKUP_R2_BUCKET=briven-datapane-backups
BRIVEN_BACKUP_R2_ENDPOINT=https://<r2-account-id>.r2.cloudflarestorage.com
BRIVEN_BACKUP_R2_ACCESS_KEY=replace-with-r2-access-key
BRIVEN_BACKUP_R2_SECRET_KEY=replace-with-r2-secret-key
BRIVEN_BACKUP_ENCRYPTION_KEY=replace-with-aes-256-passphrase-min-32-chars