example.env

# -----------------------------------------------------------------------------
# Luvora.love - Environment Configuration Example
# -----------------------------------------------------------------------------
# This file documents all environment variables required for the application.
# Copy this file to .env.local and fill in your real credentials.
#
# SECURITY WARNING:
# - Variables starting with NEXT_PUBLIC_ are exposed to the browser.
# - All other variables are PRIVATE and available only on the server.
# -----------------------------------------------------------------------------

# ==========================================
# 1. Infrastructure (Public)
# ==========================================
# The public URL of your PocketBase instance.
# Used by the frontend client to fetch data and subscribe to realtime events.
NEXT_PUBLIC_POCKETBASE_URL="https://your-pocketbase-instance.com"


# ==========================================
# 2. Sovereign Backend (Private)
# ==========================================
# Admin credentials for the PocketBase instance.
# Required for server-side actions (Phase 3 & 4) like:
# - Verifying Webhook signatures and updating user statuses securely.
# - Running the automation broadcast script.
POCKETBASE_ADMIN_EMAIL="admin@luvora.love"
POCKETBASE_ADMIN_PASSWORD="super-secure-password"


# ==========================================
# 3. Monetization - Lemon Squeezy (Private)
# ==========================================
# API Key for creating checkout sessions.
LEMONSQUEEZY_API_KEY="ls_api_..."

# The Store ID for Luvora in Lemon Squeezy.
LEMONSQUEEZY_STORE_ID="12345"

# The Variant ID for the "Hero" (Premium) Tier product.
LEMONSQUEEZY_VARIANT_ID="67890"

# Secret used to verify the X-Signature header in Payment Webhooks.
# Must match the signing secret in your Lemon Squeezy Dashboard.
LEMONSQUEEZY_WEBHOOK_SECRET="your-webhook-secret"


# ==========================================
# 4. Exclusivity Logic (Private)
# ==========================================
# A random salt string used to hash the Daily Spark for Premium users.
# Ensures that even if someone guesses the UserID + Date algorithm,
# they cannot replicate the specific message selection without this key.
PREMIUM_POOL_SECRET="change-this-to-a-long-random-string"


# ==========================================
# 5. Automation & Messaging (Private)
# ==========================================
# Token for the Telegram Bot used to send daily sparks.
TELEGRAM_BOT_TOKEN="123456:ABC-DEF1234ghIkl-zyx57W2v1u123ew11"

# Access Token for the WhatsApp Cloud API (Meta).
WHATSAPP_API_TOKEN="EAAG..."

# Phone Number ID (not phone number) for the WhatsApp sender.
WHATSAPP_PHONE_NUMBER_ID="100200300400"