# =============================================================================
# Customer Portal - Portainer Environment Variables (TEMPLATE)
# =============================================================================
# Copy this file and fill in your actual values.
# DO NOT commit files with real secrets to version control.
# =============================================================================

# -----------------------------------------------------------------------------
# Images & Ports
# -----------------------------------------------------------------------------
FRONTEND_IMAGE=portal-frontend:latest
BACKEND_IMAGE=portal-backend:latest
FRONTEND_PORT=3000
BACKEND_PORT=4000

# -----------------------------------------------------------------------------
# Application
# -----------------------------------------------------------------------------
APP_NAME=customer-portal-bff
APP_BASE_URL=https://your-domain.com
CORS_ORIGIN=https://your-domain.com

# -----------------------------------------------------------------------------
# Database (PostgreSQL)
# -----------------------------------------------------------------------------
POSTGRES_DB=portal_prod
POSTGRES_USER=portal
# Generate with: openssl rand -base64 24
POSTGRES_PASSWORD=<GENERATE-SECURE-PASSWORD>

# -----------------------------------------------------------------------------
# Security & Auth
# -----------------------------------------------------------------------------
# Generate with: openssl rand -base64 32
JWT_SECRET=<GENERATE-WITH-openssl-rand-base64-32>
JWT_EXPIRES_IN=7d
BCRYPT_ROUNDS=12
# Generate with: openssl rand -base64 32
CSRF_SECRET_KEY=<GENERATE-WITH-openssl-rand-base64-32>

# Auth Settings
AUTH_ALLOW_REDIS_TOKEN_FAILOPEN=false
AUTH_REQUIRE_REDIS_FOR_TOKENS=false
AUTH_MAINTENANCE_MODE=false

# Rate Limiting
RATE_LIMIT_TTL=60
RATE_LIMIT_LIMIT=100

# -----------------------------------------------------------------------------
# WHMCS Integration
# -----------------------------------------------------------------------------
WHMCS_BASE_URL=https://your-whmcs-instance.com
WHMCS_API_IDENTIFIER=<YOUR-WHMCS-API-IDENTIFIER>
WHMCS_API_SECRET=<YOUR-WHMCS-API-SECRET>

# -----------------------------------------------------------------------------
# Salesforce Integration
# -----------------------------------------------------------------------------
SF_LOGIN_URL=https://your-org.my.salesforce.com
SF_CLIENT_ID=<YOUR-SF-CONNECTED-APP-CLIENT-ID>
SF_USERNAME=<YOUR-SF-INTEGRATION-USERNAME>
SF_EVENTS_ENABLED=true

# Salesforce Private Key (Base64 encoded)
# To encode: base64 -w 0 < sf-private.key
SF_PRIVATE_KEY_BASE64=<BASE64-ENCODED-PRIVATE-KEY>

# -----------------------------------------------------------------------------
# Freebit SIM API
# -----------------------------------------------------------------------------
FREEBIT_BASE_URL=https://i1.mvno.net/emptool/api
FREEBIT_OEM_ID=<YOUR-OEM-ID>
FREEBIT_OEM_KEY=<YOUR-OEM-KEY>

# -----------------------------------------------------------------------------
# Email (SendGrid)
# -----------------------------------------------------------------------------
EMAIL_ENABLED=true
EMAIL_FROM=no-reply@your-domain.com
EMAIL_FROM_NAME=Your Company Name
SENDGRID_API_KEY=<YOUR-SENDGRID-API-KEY>

# -----------------------------------------------------------------------------
# Salesforce Portal Config
# -----------------------------------------------------------------------------
PORTAL_PRICEBOOK_ID=<YOUR-PRICEBOOK-ID>
PORTAL_PRICEBOOK_NAME=Portal

# -----------------------------------------------------------------------------
# Logging
# -----------------------------------------------------------------------------
LOG_LEVEL=info