# Copy to .env in the project root and fill in real values. Never commit
# .env to git, and never place it inside public/.

NODE_ENV=development
PORT=3001
APP_URL=https://api.yourdomain.com
FRONTEND_URL=http://localhost:5173

DATABASE_URL="mysql://hb_user:HbDev%402026%21@localhost:3306/hb_database"

DB_HOST=localhost
DB_PORT=3306
DB_NAME=hb_database
DB_USER=hb_user
DB_PASS=HbDev@2026!

# Generate with: node -e "console.log(require('crypto').randomBytes(48).toString('hex'))"
JWT_SECRET=2e6d134b0b5095333305383a3d9b10a70d91dcee9b69c8c19a53ee82197f15d2
JWT_ACCESS_TTL_SECONDS=1800
JWT_REFRESH_TTL_SECONDS=1209600

SMTP_HOST=technosphereinnovations.com
SMTP_PORT=465
SMTP_SECURE=true
SMTP_USER=support@technosphereinnovations.com
SMTP_PASS=Favor2026##
SMTP_FROM_EMAIL=support@technosphereinnovations.com
SMTP_FROM_NAME=HouseBank


# Which transport actually sends mail -- 'smtp' (default) or 'brevo'.
# Switch to 'brevo' if SMTP auth on your hosting account is unreliable
# (this is what unblocked real OTP delivery in Sep 2026 -- see
# claude/backend-status.md). Get an API key from app.brevo.com ->
# Settings -> SMTP & API -> API Keys. SMTP_FROM_EMAIL/SMTP_FROM_NAME
# above are reused as the sender identity for Brevo too.
MAIL_DRIVER=smtp
BREVO_API_KEY=

# Paystack — subscriptions and investment payments (the "instant" side of
# the hybrid payment model; large property purchases use manual
# proof-of-payment upload instead — see docs/ROADMAP.md).
PAYSTACK_SECRET_KEY=
PAYSTACK_PUBLIC_KEY=

# Max upload size in bytes. 5242880 = 5MB.
UPLOAD_MAX_SIZE=5242880

TWILIO_SID=ACd0385c90cc573470c050e4a0fac35647
TWILIO_AUTH_TOKEN=068b8349171ec04d80cde9f4c720f2da
TWILIO_FROM=+15412295680

