.env.example

# PostgreSQL connection string.
DATABASE_URL=postgresql://user:password@localhost:5432/mailwave?schema=public

# Secret key for signing Auth.js sessions. Generate with: openssl rand -base64 32
AUTH_SECRET="your-secret-key-here"

# Base URL of the app. Used by Auth.js for callbacks and to build the tracking pixel URL.
# In production, must point to the real domain and be reachable from the internet (e.g. https://your-domain.com).
AUTH_URL="http://localhost:3001"

# Local application port.
PORT=3001

# 32+ character key used to encrypt sensitive data at rest (SMTP passwords,
# API keys, OAuth tokens). Generate with: openssl rand -hex 16
# WARNING: must be at least 32 characters; known placeholders are rejected.
# WARNING: changing this value makes all previously encrypted data unrecoverable
# unless you run `npm run rotate-key` with OLD_ENCRYPTION_KEY set to the previous value.
ENCRYPTION_KEY="your-32-or-more-character-key-here"

# Redis connection URL, used by BullMQ for the campaign sending queue.
REDIS_URL="redis://localhost:6379"

# App version displayed in the sidebar footer.
NEXT_PUBLIC_APP_VERSION="1.0.0"

# Demo user password for `npm run seed` (dev/test only - seed refuses to run
# when NODE_ENV=production). If unset, defaults to "password123".
SEED_DEMO_PASSWORD="password123"