# =============================================================================
# Customer Portal - Portainer Environment Variables
# =============================================================================
# Copy these into Portainer UI when creating/updating the stack
# Replace all placeholder values with your actual secrets
# =============================================================================

# -----------------------------------------------------------------------------
# Images & Ports
# -----------------------------------------------------------------------------
FRONTEND_IMAGE=portal-frontend
BACKEND_IMAGE=portal-backend
IMAGE_TAG=latest
FRONTEND_PORT=3000
BACKEND_PORT=4000

# -----------------------------------------------------------------------------
# Application
# -----------------------------------------------------------------------------
APP_NAME=customer-portal-bff
APP_BASE_URL=https://asolutions.jp
CORS_ORIGIN=https://asolutions.jp

# -----------------------------------------------------------------------------
# Database (PostgreSQL)
# -----------------------------------------------------------------------------
POSTGRES_DB=portal_prod
POSTGRES_USER=portal
POSTGRES_PASSWORD=<GENERATE_WITH_openssl_rand_base64_24>

# -----------------------------------------------------------------------------
# Security & Auth
# -----------------------------------------------------------------------------
# Generate with: openssl rand -base64 32
JWT_SECRET=<GENERATE_WITH_openssl_rand_base64_32>
JWT_SECRET_PREVIOUS=
JWT_EXPIRES_IN=7d
JWT_ISSUER=customer-portal
JWT_AUDIENCE=portal
BCRYPT_ROUNDS=12
CSRF_SECRET_KEY=<GENERATE_WITH_openssl_rand_base64_32>

# Auth Settings
AUTH_ALLOW_REDIS_TOKEN_FAILOPEN=false
AUTH_REQUIRE_REDIS_FOR_TOKENS=false
AUTH_BLACKLIST_FAIL_CLOSED=false
AUTH_MAINTENANCE_MODE=false

# Rate Limiting
RATE_LIMIT_TTL=60
RATE_LIMIT_LIMIT=100

# -----------------------------------------------------------------------------
# WHMCS Integration
# -----------------------------------------------------------------------------
WHMCS_BASE_URL=https://accounts.asolutions.co.jp
WHMCS_API_IDENTIFIER=<YOUR_WHMCS_API_IDENTIFIER>
WHMCS_API_SECRET=<YOUR_WHMCS_API_SECRET>
# -----------------------------------------------------------------------------
# Salesforce Integration
# -----------------------------------------------------------------------------
SF_LOGIN_URL=https://asolutions.my.salesforce.com
SF_CLIENT_ID=<YOUR_SF_CLIENT_ID>
SF_USERNAME=<YOUR_SF_USERNAME>
SF_EVENTS_ENABLED=true

# Salesforce Private Key (Base64 encoded)
# To encode: base64 -w 0 < sf-private.key
SF_PRIVATE_KEY_BASE64=<BASE64_ENCODED_SF_PRIVATE_KEY>


# -----------------------------------------------------------------------------
# Freebit SIM API
# -----------------------------------------------------------------------------
FREEBIT_BASE_URL=https://i1.mvno.net/emptool/api
FREEBIT_OEM_ID=PASI
FREEBIT_OEM_KEY=<YOUR_FREEBIT_OEM_KEY>

# -----------------------------------------------------------------------------
# Email (SendGrid)
# -----------------------------------------------------------------------------
EMAIL_ENABLED=true
EMAIL_FROM=no-reply@asolutions.jp
EMAIL_FROM_NAME=Assist Solutions
SENDGRID_API_KEY=<YOUR-SENDGRID-API-KEY>

# -----------------------------------------------------------------------------
# Salesforce Portal Config
# -----------------------------------------------------------------------------
PORTAL_PRICEBOOK_ID=<YOUR_SF_PRICEBOOK_ID>
PORTAL_PRICEBOOK_NAME=Portal

# -----------------------------------------------------------------------------
# Logging
# -----------------------------------------------------------------------------
LOG_LEVEL=info