.env.example

# ─── Database ───
DATABASE_URL="postgresql://user:password@host:5432/dbname?sslmode=require"

# ─── Auth ───
# Generate with: node -e "console.log(require('crypto').randomBytes(64).toString('hex'))"
JWT_SECRET="CHANGE_ME_TO_A_SECURE_RANDOM_STRING"
# Yeni token akışı (2026-04-18):
#   - Access token kısa ömürlü (default 15dk), Authorization header
#   - Refresh token uzun ömürlü (default 30g), httpOnly secure cookie ('tiq_rt')
# Eski JWT_EXPIRES_IN hala fallback olarak okunuyor — terkedildi.
JWT_ACCESS_EXPIRES_IN="15m"
JWT_REFRESH_EXPIRES_DAYS="30"

# Google OAuth (opsiyonel — `https://console.cloud.google.com/apis/credentials`)
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_CALLBACK_URL=http://localhost:3000/auth/google/callback

# ─── Iyzico Payment ───
IYZICO_API_KEY=your-api-key
IYZICO_SECRET_KEY=your-secret-key
IYZICO_BASE_URL=https://sandbox-api.iyzipay.com

# ─── Email (Resend) ───
# https://resend.com — free tier: 3000 mail/ay
RESEND_API_KEY=
RESEND_FROM="TransitIQ <onboarding@resend.dev>"

# ─── Sentry (Error Tracking) ───
# https://sentry.io — free tier: 5K event/ay, 1 user
# DSN olmazsa Sentry no-op modda çalışır (zarar vermez).
SENTRY_DSN=
# Frontend için aynı DSN'i NEXT_PUBLIC_ prefix'i ile expose et:
NEXT_PUBLIC_SENTRY_DSN=
# Source map upload için (opsiyonel, prod build'de):
SENTRY_ORG=
SENTRY_PROJECT=
SENTRY_AUTH_TOKEN=

# ─── Cloudflare Turnstile (Bot Koruması) ───
# https://dash.cloudflare.com/?to=/:account/turnstile → Site ekle (Managed/Non-interactive/Invisible)
# Free tier: 1M doğrulama/ay platform genelinde, sınırsız site
# Anahtarlar yokken backend no-op (dev mode), frontend widget render etmez
TURNSTILE_SECRET_KEY=
NEXT_PUBLIC_TURNSTILE_SITE_KEY=

# ─── App ───
NODE_ENV=development
PORT=3000
FRONTEND_URL=http://localhost:3001
BACKEND_URL=http://localhost:3000
ALLOWED_ORIGINS=http://localhost:3001,http://localhost:3002