# Copy to .env.production on the server and replace every change-me value.

COMPOSE_PROJECT_NAME=ftb_pm

# Deployment images and runtime metadata.
# GitHub Actions rewrites these values to immutable SHA image tags during deploy.
APP_VERSION=unknown
APP_BUILD_TIME=
WEB_IMAGE=ghcr.io/your-org/ftb-project-management/web:master
SERVER_IMAGE=ghcr.io/your-org/ftb-project-management/server:master

# Public entrypoint
SERVER_NAME=pm.example.com
HTTP_PORT=80
CLIENT_MAX_BODY_SIZE=20m

# Database
POSTGRES_USER=postgres
POSTGRES_PASSWORD=change-me-strong-postgres-password
POSTGRES_DB=ftb_pm
DATABASE_URL=postgresql://postgres:change-me-strong-postgres-password@postgres:5432/ftb_pm

# Redis
REDIS_URL=redis://redis:6379

# Web
# For same-domain Nginx deployment, keep this relative path so browser requests go to /api/v1.
NEXT_PUBLIC_API_URL=/api/v1
# Fallback used by the Next.js server if the web container is exposed directly.
NEXT_API_PROXY_TARGET=http://server:3001
NEXTAUTH_URL=https://pm.example.com
NEXTAUTH_SECRET=change-me-random-32-byte-secret

# AI provider fallback. Admins can also configure providers in /admin/ai-config.
ANTHROPIC_API_KEY=sk-ant-xxx

# Optional mail notification settings
SMTP_HOST=
SMTP_PORT=465
SMTP_USER=
SMTP_PASS=

# Optional monitoring profile. Do not commit real production passwords.
PROMETHEUS_PORT=9090
PROMETHEUS_RETENTION=15d
GRAFANA_PORT=3002
GRAFANA_ADMIN_USER=admin
GRAFANA_ADMIN_PASSWORD=change-me-monitoring-password