.env_sample

# Production secrets should be managed via Doppler or secure runtime injection.
# Generate strong secrets using:
# node -e "console.log(require('crypto').randomBytes(64).toString('hex'))"
NODE_ENV: development
PORT: 8080

# Database
MONGODB_URL: mongodb://localhost:27017/ultimate_health_dev
BASE_URL: http://localhost:8080

# JWT Secrets (Use distinct, cryptographically strong random strings for each token type)
JWT_ACCESS_SECRET: your_jwt_access_secret_here
JWT_REFRESH_SECRET: your_jwt_refresh_secret_here
JWT_VERIFICATION_SECRET: your_jwt_verification_secret_here

# JWT Expiration Times
JWT_ACCESS_EXPIRY: 15m
JWT_REFRESH_EXPIRY: 7d
JWT_VERIFICATION_EXPIRY: 1h

# Token Hashing Secret (for jti / reset tokens)
TOKEN_SECRET: your_token_secret_here

# Email / SMTP Settings
SMTP_HOST: smtp.example.com
EMAIL_USER: noreply@example.com
EMAIL_PASS: your_email_password_here

# Object Storage (Vultr / S3 Compatible)
VULTR_ACCESS_KEY: your_access_key_here
VULTR_SECRET_KEY: your_secret_key_here
BUCKET_NAME: ultimatehealth-bucket
ENDPOINT_URL: https://s3.example.com

# Redis Cache / Message Queue
REDIS_HOST: 127.0.0.1
REDIS_PORT: 6379
REDIS_PASSWORD:

# OTP Settings
OTP_EXPIRY_MINUTES: 10
OTP_RESEND_COOLDOWN_SECONDS: 60
OTP_MAX_ATTEMPTS: 5

# Gemini AI API Keys (Primary and Fallbacks)
GEMINI_API_KEY_1: your_gemini_api_key_here