.env.example

# ===== AI Features (OpenRouter + LangChain) =====
# AI features are only available to root users (superusers)
OPENROUTER_API_KEY=sk-or-v1-xxx
FEATURE_AI_ENABLED=true

# Firestore Configuration (JSON string from Firebase Console > Service Accounts)
FIRESTORE_CONFIG='{"type":"service_account","project_id":"example-project","private_key_id":"abc123","private_key":"-----BEGIN PRIVATE KEY-----\nYOUR_PRIVATE_KEY_HERE\n-----END PRIVATE KEY-----\n","client_email":"firebase-adminsdk@example-project.iam.gserviceaccount.com","client_id":"123456789","auth_uri":"https://accounts.google.com/o/oauth2/auth","token_uri":"https://oauth2.googleapis.com/token","auth_provider_x509_cert_url":"https://www.googleapis.com/oauth2/v1/certs","client_x509_cert_url":"https://www.googleapis.com/robot/v1/metadata/x509/firebase-adminsdk%40example-project.iam.gserviceaccount.com"}'

# JWT Authentication (RS256 - use PUBLIC key to verify tokens)
# IMPORTANT: Key must be in SPKI format (-----BEGIN PUBLIC KEY-----)
# If you have RSA PUBLIC KEY (PKCS#1), run: pnpm exec ts-node --esm scripts/convert-key.ts
# This is required because Next.js Edge Runtime doesn't support Node.js crypto module
JWT_PUBLIC_KEY=your-jwt-public-key-here

# Auth Cookie Name
JWT_AUTH_COOKIE_NAME=rds-session