# =============================================================================
# Customer Portal - Development Environment
# =============================================================================
# Copy to .env in project root for local development
# This file configures both frontend and backend for dev mode
# =============================================================================

# -----------------------------------------------------------------------------
# Core
# -----------------------------------------------------------------------------

NODE_ENV=development
APP_NAME=customer-portal-bff
APP_BASE_URL=http://localhost:3000

# Ports
BFF_PORT=4000
NEXT_PORT=3000

# -----------------------------------------------------------------------------
# Frontend (Next.js) - Browser-exposed variables
# -----------------------------------------------------------------------------

NEXT_PUBLIC_APP_NAME="Customer Portal (Dev)"
NEXT_PUBLIC_APP_VERSION=1.0.0-dev
NEXT_PUBLIC_API_BASE=http://localhost:4000
NEXT_PUBLIC_ENABLE_DEVTOOLS=true

# -----------------------------------------------------------------------------
# Database & Cache
# -----------------------------------------------------------------------------

DATABASE_URL=postgresql://dev:dev@localhost:5432/portal_dev?schema=public
REDIS_URL=redis://localhost:6379

# -----------------------------------------------------------------------------
# Security
# -----------------------------------------------------------------------------

# Generate with: openssl rand -base64 32
JWT_SECRET=HjHsUyTE3WhPn5N07iSvurdV4hk2VEkIuN+lIflHhVQ=
JWT_EXPIRES_IN=7d
BCRYPT_ROUNDS=12

CORS_ORIGIN=http://localhost:3000
TRUST_PROXY=false

# Redis token handling (relaxed for dev)
AUTH_ALLOW_REDIS_TOKEN_FAILOPEN=false
AUTH_REQUIRE_REDIS_FOR_TOKENS=false
AUTH_MAINTENANCE_MODE=false

# -----------------------------------------------------------------------------
# Rate Limiting (relaxed for dev)
# -----------------------------------------------------------------------------

RATE_LIMIT_TTL=60
RATE_LIMIT_LIMIT=1000
AUTH_RATE_LIMIT_TTL=900
AUTH_RATE_LIMIT_LIMIT=10

# Show detailed validation errors in dev
EXPOSE_VALIDATION_ERRORS=true

# -----------------------------------------------------------------------------
# WHMCS Integration (dev credentials)
# -----------------------------------------------------------------------------

WHMCS_DEV_BASE_URL=
WHMCS_DEV_API_IDENTIFIER=
WHMCS_DEV_API_SECRET=
WHMCS_QUEUE_CONCURRENCY=15
WHMCS_QUEUE_TIMEOUT_MS=30000

# -----------------------------------------------------------------------------
# Salesforce Integration
# -----------------------------------------------------------------------------

SF_LOGIN_URL=
SF_CLIENT_ID=
SF_PRIVATE_KEY_PATH=./secrets/sf-private.key
SF_USERNAME=

# Timeouts
SF_AUTH_TIMEOUT_MS=30000
SF_TOKEN_TTL_MS=720000
SF_TOKEN_REFRESH_BUFFER_MS=60000

# Queue throttling
SF_QUEUE_CONCURRENCY=15
SF_QUEUE_TIMEOUT_MS=30000
SF_QUEUE_LONG_RUNNING_TIMEOUT_MS=600000

# Platform Events
SF_EVENTS_ENABLED=true
SF_EVENTS_REPLAY=LATEST
SF_PUBSUB_ENDPOINT=api.pubsub.salesforce.com:7443

# -----------------------------------------------------------------------------
# Freebit SIM Management
# -----------------------------------------------------------------------------

FREEBIT_BASE_URL=
FREEBIT_OEM_ID=
FREEBIT_OEM_KEY=
FREEBIT_TIMEOUT=30000

# -----------------------------------------------------------------------------
# Email
# -----------------------------------------------------------------------------

EMAIL_ENABLED=true
EMAIL_USE_QUEUE=true
EMAIL_FROM=no-reply@asolutions.co.jp
EMAIL_FROM_NAME=Assist Solutions

# -----------------------------------------------------------------------------
# Portal Configuration
# -----------------------------------------------------------------------------

PORTAL_PRICEBOOK_ID=01sTL000008eLVlYAM
PORTAL_PRICEBOOK_NAME=Portal

# -----------------------------------------------------------------------------
# Logging
# -----------------------------------------------------------------------------

LOG_LEVEL=debug
DISABLE_HTTP_LOGGING=false

# -----------------------------------------------------------------------------
# Local Dev Bypasses (NEVER enable in production!)
# -----------------------------------------------------------------------------

DISABLE_CSRF=false
DISABLE_RATE_LIMIT=false
DISABLE_ACCOUNT_LOCKING=false