# Database
DATABASE_URL="postgresql://healthlog:healthlog@localhost:5432/healthlog?schema=public"

# App
NEXT_PUBLIC_APP_URL="http://localhost:3000"
APP_URL="http://localhost:3000"
NODE_ENV="development"

# Session
SESSION_SECRET="change-me-to-a-random-64-char-hex-string"

# Encryption (for tokens, sensitive notes)
ENCRYPTION_KEY="change-me-to-a-random-64-char-hex-string"

# HMAC key for API token hashing
API_TOKEN_HMAC_KEY="change-me-to-a-random-64-char-hex-string"

# Withings OAuth (M5)
# WITHINGS_CLIENT_ID=""
# WITHINGS_CLIENT_SECRET=""
# WITHINGS_REDIRECT_URI=""
# WITHINGS_WEBHOOK_SECRET=""  # random secret for webhook callback URL hardening

# Telegram webhook hardening (optional but recommended)
# TELEGRAM_WEBHOOK_SECRET=""

# OpenAI (optional, user-provided keys stored encrypted)
# No server-side key needed - users bring their own

# Structured Logging (Wide Events)
# LOG_LEVEL="info"                    # debug | info | warn | error
# LOG_SAMPLE_RATE="1.0"              # 0.0–1.0, fraction of successful requests to log
# LOG_SLOW_THRESHOLD_MS="3000"       # Requests slower than this are always logged
# LOG_INCLUDE_STACK="true"           # Include stack traces in error events
# LOKI_ENDPOINT=""                   # Optional: Loki Push API (e.g. http://loki:3100)
# LOKI_USERNAME=""                   # Optional: Loki basic auth username
# LOKI_PASSWORD=""                   # Optional: Loki basic auth password