Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
62 changes: 22 additions & 40 deletions .env.example
Original file line number Diff line number Diff line change
Expand Up @@ -2,53 +2,35 @@
NODE_ENV=development
PORT=5000

# JWT
JWT_SECRET=your_jwt_secret_here_min_32_chars
JWT_REFRESH_SECRET=your_refresh_secret_here_min_32_chars
# Token lifetimes (optional – defaults shown)
# Access token: short-lived to minimise exposure window (architecture: 15m)
JWT_EXPIRES_IN=15m
# Refresh token: long-lived; rotated on every use and stored in Firestore
JWT_REFRESH_EXPIRES_IN=7d

# Google Cloud / Firebase Admin (Firestore)
# Option A – service account JSON file path (local dev)
GOOGLE_APPLICATION_CREDENTIALS=/path/to/serviceAccountKey.json
# Option B – individual credential fields (CI / Render)
FIREBASE_PROJECT_ID=your-gcp-project-id
FIREBASE_CLIENT_EMAIL=firebase-adminsdk-xxx@your-project.iam.gserviceaccount.com
# Firebase Admin SDK
FIREBASE_PROJECT_ID=your-firebase-project-id
FIREBASE_CLIENT_EMAIL=your-service-account@project.iam.gserviceaccount.com
FIREBASE_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n"

# Cloudinary
CLOUDINARY_CLOUD_NAME=your_cloud_name
CLOUDINARY_API_KEY=your_api_key
CLOUDINARY_API_SECRET=your_api_secret

# OpenAI
OPENAI_API_KEY=sk-...
# Stripe (Payment Integration)
# Secret key from Stripe Dashboard → Developers → API keys
STRIPE_SECRET_KEY=sk_test_...
# Webhook signing secret from Stripe Dashboard → Developers → Webhooks

# Stripe
STRIPE_SECRET_KEY=sk_live_...
STRIPE_WEBHOOK_SECRET=whsec_...
# Price ID for the expert analysis product (from Stripe Dashboard → Products)
# If not set, an ad-hoc price of ₪149 is used
STRIPE_PRICE_ID=price_...

# CORS – set to your frontend origin
CORS_ORIGIN=http://localhost:3000
# Cloudinary
CLOUDINARY_CLOUD_NAME=your-cloud-name
CLOUDINARY_API_KEY=your-api-key
CLOUDINARY_API_SECRET=your-api-secret

# JWT
JWT_SECRET=your-super-secret-jwt-key-min-32-chars
JWT_EXPIRES_IN=7d

# Bank of Israel API (optional – defaults to official BOI SDMX endpoint)
# Override only for testing or if the BOI URL changes
BOI_API_BASE_URL=https://edge.boi.gov.il/FusionEdgeServer/sdmx/v2/data/dataflow/BOI
# CORS
CORS_ORIGIN=http://localhost:3000

# Email (optional)
SMTP_HOST=smtp.example.com
SMTP_PORT=587
SMTP_SECURE=false
SMTP_USER=user@example.com
SMTP_PASS=password
EMAIL_FROM=noreply@morty.app
# Rate Limiting
RATE_LIMIT_WINDOW_MS=60000
RATE_LIMIT_MAX_REQUESTS=100
PAID_RATE_LIMIT_MAX=5

# Logging
LOG_LEVEL=info
# BOI Rates API
BOI_RATES_API_URL=https://edge.boi.org.il/FusionEdgeServer/sdmx/v2/data/dataflow/BOI.STATISTICS/BSS_D_INTEREST_RATES_MORTGAGES
Loading
Loading