# cal.diy — Commons Computer deployment env (issue #11, cc branch)
# Template spec for the production `.env`; ansible renders `.env` from the
# cc-ansible vault (group_vars/cc_apps/vault.yml) — keep the two in sync.
# Never commit the real `.env`. Generate secrets with:
#   NEXTAUTH_SECRET=$(openssl rand -hex 32)
#   CALENDSO_ENCRYPTION_KEY=$(openssl rand -hex 24)
#   CALCOM_APP_CREDENTIAL_ENCRYPTION_KEY=$(openssl rand -hex 32)
#   JWT_SECRET=$(openssl rand -hex 32)
#   POSTGRES_PASSWORD=$(openssl rand -hex 24)
# IMPORTANT: use HEX for all secrets — compose builds DATABASE_URL from
# POSTGRES_PASSWORD, so it must be URL-safe (base64 `+`/`/` chars break Prisma).

NODE_ENV=production
NEXT_PUBLIC_WEBAPP_URL=https://cal.commonscomputer.com
NEXT_PUBLIC_API_V2_URL=
CALCOM_TELEMETRY_DISABLED=1
ORGANIZATIONS_ENABLED=false
ALLOWED_HOSTNAMES='"cal.commonscomputer.com"'

# --- postgres (compose service `database`; creds also drive DATABASE_URL) ---
DATABASE_HOST=database
POSTGRES_USER=caldiy
POSTGRES_PASSWORD=REPLACE_ME_HEX
POSTGRES_DB=calendso
DATABASE_URL=postgresql://caldiy:REPLACE_ME_HEX@database/calendso
DATABASE_DIRECT_URL=postgresql://caldiy:REPLACE_ME_HEX@database/calendso

# --- auth / encryption ---
NEXTAUTH_URL=https://cal.commonscomputer.com
NEXTAUTH_SECRET=REPLACE_ME_HEX
CALENDSO_ENCRYPTION_KEY=REPLACE_ME_HEX
CALCOM_APP_CREDENTIAL_ENCRYPTION_KEY=REPLACE_ME_HEX

# --- redis (compose service `redis`) ---
REDIS_URL=redis://redis:6379
REDIS_PORT=6379

# --- v2 API (calcom-api service; off for v1) ---
JWT_SECRET=REPLACE_ME_HEX
API_KEY_PREFIX=cal_
WEB_APP_URL=https://cal.commonscomputer.com