.env.example

# .env.example
# Copy to .env and fill in values

# Database
POSTGRES_USER=textstack_prod
POSTGRES_PASSWORD=<secure-password>
POSTGRES_DB=textstack_prod

# JWT
JWT_SECRET=<min-32-char-secret>
JWT_ISSUER=textstack.app
JWT_AUDIENCE=textstack.app

# Google OAuth
GOOGLE_CLIENT_ID=<google-client-id>
# Optional: comma-separated extra Google OAuth client IDs accepted during
# rotation (e.g. while old mobile builds are still in the wild).
# GOOGLE_LEGACY_CLIENT_IDS=old-id-1,old-id-2

# Environment
ASPNETCORE_ENVIRONMENT=Production

# Search (postgres — Meilisearch provider exists in code but not in default compose)
SEARCH_PROVIDER=postgres

# IndexNow (Bing/Yandex instant indexing)
INDEXNOW_KEY=
INDEXNOW_ENABLED=false

# OpenAI (contextual /explain endpoint + translation)
# gpt-4.1-nano: cheapest + fastest non-reasoning. Default for /explain + /translate.
# gpt-4o-mini / gpt-4.1-mini: bump up if quality not enough on nano.
# gpt-5-mini / o-series: reasoning (slow + higher token cost, not needed for short hot-path tasks).
OPENAI_API_KEY=
OPENAI_MODEL=gpt-4.1-nano
# Explain runs a stronger model than the nano default (per-feature route; translate/rag stay on nano).
# Also serves as the teacher model for Explain distillation.
OPENAI_EXPLAIN_MODEL=gpt-4.1-mini

# Resend (email: password reset + admin ops alerts)
RESEND_API_KEY=
RESEND_FROM_EMAIL=noreply@textstack.app
# Where SEO backfill / ops failure alerts go. Empty = alerts disabled.
ADMIN_ALERT_EMAIL=

# PDF content cleanup (quality-poll.sh Phase 3 — feat-0007).
# When true, chapters scoring below the threshold get an LLM cleanup pass
# via Claude CLI. Off by default — leaves the poller at structure-only.
# CLEANUP_TIMEOUT: per-chapter Claude budget; 20k-word chapters take ~15-20 min.
CONTENT_CLEANUP_ENABLED=false
CONTENT_QUALITY_THRESHOLD=60
CLEANUP_TIMEOUT=1500