.env.example

# ---- Replicate (AI generation) ----
# Get one at https://replicate.com/account/api-tokens (see README).
REPLICATE_API_TOKEN=

# ---- Stripe ----
# Secret key from https://dashboard.stripe.com/apikeys (use the TEST key first: sk_test_...)
STRIPE_SECRET_KEY=
# Webhook signing secret from https://dashboard.stripe.com/webhooks (see README for setup)
STRIPE_WEBHOOK_SECRET=
# Price IDs for the three packs (start with "price_..."). Create them per README, then paste here.
STRIPE_PRICE_BASIC=
STRIPE_PRICE_STANDARD=
STRIPE_PRICE_EXECUTIVE=

# ---- App ----
# Public base URL used for Stripe success/cancel redirects, e.g. http://localhost:3000 or https://your-app.vercel.app
NEXT_PUBLIC_BASE_URL=http://localhost:3000

# ---- Database (Postgres) ----
# When set, orders/jobs/rate-limits use Postgres (schema auto-applied from sql/schema.sql).
# When unset, everything falls back to local JSON files (dev only).
# Serverless tip: use your provider's POOLED connection string (Neon pooler / Supabase Supavisor).
DATABASE_URL=

# ---- Storage: Cloudflare R2 (S3-compatible) ----
# When ALL five are set, uploads return PUBLIC URLs (required for Replicate generation).
# When unset, uploads stay on local disk (dev only — generation cannot run).
R2_ENDPOINT=
R2_ACCESS_KEY_ID=
R2_SECRET_ACCESS_KEY=
R2_BUCKET=
# Public base URL for the bucket, e.g. https://pub-abc123.r2.dev or https://cdn.yourdomain.com
R2_PUBLIC_BASE_URL=

# ---- Email (Resend) ----
# Delivery emails ("your headshots are ready") are skipped with a log line when unset (dev).
RESEND_API_KEY=
# Must be a verified sender in Resend, e.g. "AI Headshots <orders@yourdomain.com>"
EMAIL_FROM=

# ---- Worker ----
# Seconds between job-queue polls. Default 30.
WORKER_POLL_SECONDS=30

# ---- Storage (local dev defaults — used only when R2 is unset) ----
UPLOAD_DIR=./uploads
ORDERS_DB=./data/orders.json
JOBS_DB=./data/jobs.json
RATE_LIMIT_DB=./data/rate_limits.json