# Database
# keep Neon credentials secure: do not expose them to client-side code

DATABASE_URL='postgresql://neondb_owner:npg_6ur7YfkNpqgQ@ep-bitter-poetry-aodh6zcz-pooler.c-2.ap-southeast-1.aws.neon.tech/neondb?sslmode=require&channel_binding=require'

# JWT
JWT_SECRET=your-super-secret-key-change-in-production

# Server
PORT=8080
ALLOWED_ORIGINS=http://localhost:5173,http://localhost:3000

# SMTP (for email notifications)
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASS=
SMTP_FROM_EMAIL=noreply@example.com
SMTP_FROM_NAME="SMA Katolik St. Louis 1 Surabaya Ticketing"

# Midtrans Payment Gateway
MIDTRANS_SERVER_KEY=
MIDTRANS_CLIENT_KEY=
MIDTRANS_IS_PRODUCTION=false

# Google OAuth
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_CALLBACK_URL=http://localhost:8080/api/auth/google/callback

# App URL (for email links)
APP_URL=http://localhost:5173

# Upload Directory
UPLOAD_DIR=./uploads

# Admin seed password (used on first run)
ADMIN_PASSWORD=Password123!
