DieselDepot-APP/coolify.env

# ─── Coolify env vars — Diesel Depot (FILLED IN) ───────────────────────────
# Paste each non-commented line into Coolify's "Environment Variables" panel.
# Coolify sets $PORT and the public domain automatically — do NOT add them.
# One variable per line. No spaces around `=`. No quotes.

# ╔══════════════════════════════════════════════════════════════════════╗
# ║  REQUIRED — paste these into Coolify                                ║
# ╚══════════════════════════════════════════════════════════════════════╝

# The URL the browser hits to reach PocketBase.
#
# Set this to the SAME-ORIGIN proxy: "/api/pb". The Next.js app exposes
# an /api/pb/[...path] route that forwards to PB. This is required when
# the app is served over HTTPS but PB is on a plain-HTTP host — browsers
# block HTTPS pages from calling HTTP URLs (mixed content), so the login
# API call would fail with the generic "Invalid email or password" error
# otherwise. The proxy is server-to-server, no mixed-content rules apply.
#
# Override this to the direct PB URL only if BOTH the app AND PB are on
# HTTPS (e.g. PB also hosted on Coolify with its own https domain).
NEXT_PUBLIC_POCKETBASE_URL=/api/pb

# The server-side upstream for the /api/pb proxy. This is the absolute
# URL of the actual PB instance — kept separate from the public URL so
# the client never needs to know the real PB host. Falls back to a
# sensible default if unset, so you only need to override this if you
# migrate PB to a different host.
PB_INTERNAL_URL=http://pocketbase-zinlbpsext2ro0lgb2558vfy.169.239.180.130.sslip.io

# Public URL the app is served from. Used as the base for Open Graph and
# Twitter card image URLs so link previews (WhatsApp, Slack, iMessage)
# resolve to absolute image paths. Defaults to https://depot.apphub.co.za
# if unset, so you only need to override this if the domain changes.
NEXT_PUBLIC_SITE_URL=https://depot.apphub.co.za

# Superuser auth token for managing dd_ collections. Only needed if you
# wire the migration scripts (npm run pb:create / pb:seed) into a Coolify
# "one-off command" to bootstrap collections on first deploy. The token
# is a long-lived superuser token — rotate it in the PB admin UI after
# initial setup if you want to remove it from Coolify's env store.
# Token scope: collectionId=pbc_3142635823 (the _superusers collection),
# type=auth, expires 2032-11-24.
PB_ADMIN_TOKEN=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb2xsZWN0aW9uSWQiOiJwYmNfMzE0MjYzNTgyMyIsImV4cCI6MTc4NDYyOTE1OCwiaWQiOiI4bjdrNmE1NmVrMng5ZzEiLCJyZWZyZXNoYWJsZSI6dHJ1ZSwidHlwZSI6ImF1dGgifQ.SjnBjkeKvi6cVspoqi_fgmQOROCz1VoLFh4BW7-DKS4

# ╔══════════════════════════════════════════════════════════════════════╗
# ║  OPTIONAL — uncomment if you need to override Coolify's defaults    ║
# ╚══════════════════════════════════════════════════════════════════════╝

# Coolify injects PORT automatically. Only set if you need a different value.
# PORT=3000

# Bind address inside the container. Leave as 0.0.0.0 to accept Coolify's proxy.
# HOSTNAME=0.0.0.0

# NODE_ENV=production

# Skips the Next.js anonymous telemetry ping.
# NEXT_TELEMETRY_DISABLED=1

# ╔══════════════════════════════════════════════════════════════════════╗
# ║  POST-DEPLOY MIGRATION (one-off command in Coolify)                  ║
# ╚══════════════════════════════════════════════════════════════════════╝
# After the first deploy succeeds:
#   1. Open the Diesel Depot service in Coolify
#   2. Go to the "Terminal" or "Commands" tab
#   3. Run:    npm run pb:create     (creates the dd_ collections — idempotent)
#             npm run pb:seed         (seeds the 2 depots + owner user)
# The PB_ADMIN_TOKEN above is used for those.
# After seeding, you can rotate the superuser token in PB and remove
# PB_ADMIN_TOKEN from Coolify's env store.