PORT=3000

DATABASE_URL="mysql://root:password@localhost/FurryPlace"

# Only required for development
SHADOW_DATABASE_URL="mysql://root:password@localhost/FurryPlace_shadow"

JWT_SECRET="your-secret-key"

# Google OAuth
GOOGLE_CLIENT_ID="your-google-client-id"
GOOGLE_CLIENT_SECRET="your-google-client-secret"
GOOGLE_CALLBACK_URL="http://localhost:3000/auth/google/callback"

# Cookie configuration
COOKIE_SECURE=true
COOKIE_SAME_SITE=Strict
# Optional: set to your public domain if needed (e.g., example.com)
COOKIE_DOMAIN=

# Bot protection
TURNSTILE_SECRET_KEY="your-turnstile-secret"
# Development bypass token (set to empty in production)
TURNSTILE_BYPASS_TOKEN="turnstile-disabled"