.env.example

# Public contributor template. Every value here is local-only and intentionally non-secret.
# Choose different credentials and secrets for any shared or deployed environment.
POSTGRES_DB=contributor_db
POSTGRES_USER=contributor
POSTGRES_PASSWORD=local-only-change-me
POSTGRES_PORT=5432
DB_URL=jdbc:postgresql://localhost:5432/contributor_db
DB_USERNAME=contributor
DB_PASSWORD=local-only-change-me

REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=
REDIS_TIMEOUT=2s

SPRING_PROFILES_ACTIVE=dev
SERVER_PORT=8080
APP_CORS_ALLOWED_ORIGINS=http://localhost:3002,http://app.localhost:3002
APP_JWT_ISSUER=gyro-api-contributor-local
APP_JWT_AUDIENCE=gyro-contributor-local
# No key is shipped in this template. The dev profile has a published, local-only fallback.
# Set a freshly generated Base64 key of at least 32 bytes before any shared deployment.
JWT_EC_PRIVATE_KEY=
JWT_EC_PUBLIC_KEY=
JWT_LEGACY_HS256_ENABLED=true
JWT_LEGACY_HS256_ACCEPT_UNTIL=

# Local verification uses structured logs and never contacts an email or SMS provider.
GYRO_VERIFICATION_EMAIL_PROVIDER=log-only
GYRO_VERIFICATION_SMS_PROVIDER=log-only
GYRO_VERIFICATION_ALLOW_CODE_LOGGING=true
MAIL_FROM=dev@example.invalid

# Outbound notification providers stay disabled until explicitly configured.
NOTIFICATION_JOBS_ENABLED=false
NOTIFICATION_EMAIL_ENABLED=false
NOTIFICATION_PRODUCT_SMS_ENABLED=false
NOTIFICATION_WEB_PUSH_ENABLED=false
NOTIFICATION_TELEGRAM_ENABLED=false
NOTIFICATION_TELEGRAM_LINKING_ENABLED=false

# PayPing stays disabled. Set BILLING_DEMO_ENABLED=true only for an interactive local checkout.
# Otherwise the non-production profile supplies the automated-test fake provider.
PAYPING_ENABLED=false
BILLING_DEMO_ENABLED=false
PAYPING_REPORT_ENABLED=false
PAYPING_RECONCILIATION_ENABLED=false
BILLING_RETURN_URL=http://localhost:8080/api/v1/billing/payping/callback
BILLING_FRONTEND_RETURN_URL=http://localhost:3002/profile/billing/verify

APP_LOG_LEVEL=DEBUG
ROOT_LOG_LEVEL=INFO