.env.example

PORT=8080
# Security: Must be at least 32 characters in production
JWT_SECRET=your_very_strong_jwt_secret_key_here

# Database
DATABASE_URL="postgresql://user:password@host:port/dbname?sslmode=require"

# Fallback DB vars (if not using DATABASE_URL)
# DB_HOST=localhost
# DB_USER=postgres
# DB_PASSWORD=postgres
# DB_NAME=quizzes
# DB_PORT=5432
DB_SSLMODE=disable

# Security Configuration
# 1. API_KEY: Required for all requests (X-API-KEY header)
API_KEY=your_strong_api_key_here
# 2. CORS & CSRF: Comma-separated allowed origins (e.g. https://your-frontend.com)
ALLOWED_ORIGINS=http://localhost:5173,http://localhost:3000
# 3. Environment: development or production
GO_ENV=development

# SMTP Configuration
SMTP_HOST=smtp.example.com
SMTP_PORT=587
SMTP_USER=user@example.com
SMTP_PASS=password

FRONTEND_URL=http://localhost:5173

# AI Configuration
GEMINI_API_KEY="your_gemini_api_key"
GEMINI_MODEL="gemini-protovision"

# Machine Learning
ML_SERVICE_URL=http://localhost:5002