.env.example

# Copy this file to .env.local for local secrets and overrides (.env.local takes precedence and is gitignored)
# cp .env.example .env.local

# Google Vertex AI
VERTEX_PROJECT_ID=your_google_cloud_project_id
VERTEX_LOCATION=us-central1

# Model Providers
PERPLEXITY_API_KEY=your_perplexity_api_key
ANTHROPIC_API_KEY=your_anthropic_api_key
OPENAI_API_KEY=your_openai_api_key

# Database (Neon PostgreSQL)
DATABASE_URL=postgresql://user:password@host/neondb?sslmode=require

# Auth (NextAuth v5 + Google OAuth)
AUTH_SECRET=generate_with_openssl_rand_-base64_32
GOOGLE_CLIENT_ID=your_google_oauth_client_id
GOOGLE_CLIENT_SECRET=your_google_oauth_client_secret

# Encryption for user-supplied API keys
KEY_ENCRYPTION_SECRET=generate_with_openssl_rand_-base64_32

# Optional Gemini API key path (Google AI Studio)
GEMINI_API_KEY=your_gemini_api_key

# Optional Vertex ADC JSON. Next dotenv and Amplify Hosting env vars truncate
# unquoted multiline JSON to "{", which used to look like Gemini flaking.
# Paste a SINGLE LINE JSON string (or wrap the JSON in single quotes).
# If GEMINI_API_KEY is set, Vertex JSON is unused for chat.
# GOOGLE_APPLICATION_CREDENTIALS_JSON='{"type":"service_account","project_id":"..."}'

# Public deployments: set to true so visitors must supply their own key (pasted BYOK or saved).
# Leave unset or false for local dev with server-side .env keys.
REQUIRE_USER_API_KEYS=false

# Optional guest passes: comma-separated codes that let visitors use the
# server-side keys above without pasting their own (Settings > Access code).
# Only consulted when REQUIRE_USER_API_KEYS=true.
ACCESS_CODES=

# Daily app-side budget for host (server) keys across free debates + access codes.
# Default 25 if unset. Set 0 to block host-key usage. BYOK is never counted.
HOST_KEY_DAILY_BUDGET_USD=25

# Accounts: enable the sign-in UI and the server-side session key lookup.
# Build-time inlined (NEXT_PUBLIC_) - rebuild after changing. Leave false for pure BYOK, no accounts.
NEXT_PUBLIC_AUTH_ENABLED=false