# Workflow app — environment template
#
# Copy to .env.local in this folder and fill in the real values.
# .env.local is git-ignored and must never be committed.

# --- PocketBase -------------------------------------------------------------
PB_URL=https://pb.agent.apphub.co.za
NEXT_PUBLIC_PB_URL=https://pb.agent.apphub.co.za
# Superuser/admin token. Lives for ~24h — re-grab from the PB admin UI.
PB_TOKEN=
PB_ADMIN_EMAIL=
PB_ADMIN_PASSWORD=

# --- App URLs ---------------------------------------------------------------
APP_URL=http://localhost:3000
NEXT_PUBLIC_APP_URL=http://localhost:3000

# --- Telegram notifications -------------------------------------------------
TELEGRAM_BOT_TOKEN=
TELEGRAM_CHAT_ID=

# --- App password gate ------------------------------------------------------
# The app has no per-user accounts. These two values protect everything.
# APP_PASSWORD  — the password you type at /login
# AUTH_SECRET   — random 32+ char secret used to sign the session cookie.
#                 Changing it logs everyone out. Generate with:
#                 node -e "console.log(require('crypto').randomBytes(32).toString('base64url'))"
#
# WARNING: keep the password alphanumeric. An unquoted `#` starts a comment in
# .env files, so APP_PASSWORD=abc#123 silently becomes "abc" and login fails
# with "Wrong password". If you must use special characters, wrap the value in
# double quotes: APP_PASSWORD="abc#123"
APP_PASSWORD=
AUTH_SECRET=

# --- CIPC BizPortal logins --------------------------------------------------
# Login 1 — primary; rotates to Login 3 when it hits the 100-search limit.
CIPC_LOGIN1_CODE=
CIPC_LOGIN1_PASSWORD=
# Login 3 — fallback.
CIPC_LOGIN3_CODE=
CIPC_LOGIN3_PASSWORD=

# --- BizPortal personal login (name reservation flow) -----------------------
# The 13-digit SA ID number used to log in at bizportal.gov.za.
BIZPORTAL_ID_NO=
BIZPORTAL_PASSWORD=