`.env.example`

36 lines
PORT=9905
NODE_ENV=production
GA4_MEASUREMENT_ID=G-XXXXXXXXXX

# Auth mode. In dev, /_devlogin sets an admin cookie. In prod, /_devlogin
# is NOT registered at all (route bypass is impossible). Setting AUTH_MODE=dev
# in prod has no effect on /_devlogin registration — but other dev-only
# behaviors may key off it, so leave this as `prod` on Kamatera.
AUTH_MODE=prod
# Required only when AUTH_MODE=dev. Generate with:
#   node -e "console.log(require('crypto').randomBytes(48).toString('hex'))"
# The string `wallco-dev-secret-change-for-prod` is treated as a placeholder
# and will refuse to register /_devlogin even in dev mode.
AUTH_DEV_SECRET=

# Trade-tier JWT signing secret. REQUIRED in prod — the server refuses to
# start if unset or set to the dev placeholder. Generate with the same
# `crypto.randomBytes(48).toString('hex')` recipe above.
WALLCO_JWT_SECRET=

# Marketplace designer-cookie HMAC. REQUIRED in prod (same fail-closed rules).
MP_DESIGNER_SECRET=

DATABASE_URL=dw_unified

# Shopify Admin API (used by the marketplace sample-order flow)
SHOPIFY_STORE=designer-laboratory-sandbox.myshopify.com
SHOPIFY_ADMIN_TOKEN=shpat_xxx
SHOPIFY_API_VERSION=2024-10
# Secret from the Shopify webhook subscription. Required in production;
# if unset, the webhook handler logs a warning and accepts unsigned bodies (dev only).
SHOPIFY_WEBHOOK_SECRET=

# Default sample price in USD when a pattern has no sample_price set.
MP_SAMPLE_PRICE=5.00