.env.example

# Spring profile
SPRING_PROFILES_ACTIVE=prod

# DB
DB_URL=jdbc:postgresql://db:5432/gachi
DB_USERNAME=gachi
DB_PASSWORD=

# AI service routing (if BE calls AI internally)
AI_BASE_URL=http://ai:8000

# NEIS Open API
NEIS_API_KEY=
NEIS_SCHOOL_API_KEY=
NEIS_SCHEDULE_API_KEY=
NEIS_MEAL_API_KEY=
NEIS_TIMETABLE_API_KEY=
NEIS_CLASS_INFO_API_KEY=
NEIS_SCHOOL_INFO_URL=https://open.neis.go.kr/hub/schoolInfo
NEIS_SCHOOL_SCHEDULE_URL=https://open.neis.go.kr/hub/SchoolSchedule
NEIS_MEAL_SERVICE_DIET_INFO_URL=https://open.neis.go.kr/hub/mealServiceDietInfo
NEIS_ELEMENTARY_TIMETABLE_URL=https://open.neis.go.kr/hub/elsTimetable
NEIS_CLASS_INFO_URL=https://open.neis.go.kr/hub/classInfo
NEIS_CONNECT_TIMEOUT_SECONDS=5
NEIS_READ_TIMEOUT_SECONDS=10

# AWS S3
AWS_REGION=ap-northeast-2
AWS_S3_BUCKET=
AWS_S3_PUBLIC_BASE_URL=
AWS_S3_IMAGE_PREFIX=images

# Redis
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=

# JWT / Auth
JWT_ISSUER=gachi-be
JWT_SECRET=replace-with-at-least-32-bytes-secret
JWT_ACCESS_TOKEN_MINUTES=15
JWT_REFRESH_TOKEN_DAYS=7
JWT_REFRESH_TOKEN_REMEMBER_DAYS=30
AUTH_CONSENT_VERSION=2026-04-v1

# Email verification policy
AUTH_EMAIL_CODE_TTL_SECONDS=300
AUTH_EMAIL_FROM_ADDRESS=
AUTH_EMAIL_MAX_ATTEMPTS=5
AUTH_EMAIL_REPLY_TO=
AUTH_EMAIL_RESEND_COOLDOWN_SECONDS=60
AUTH_EMAIL_STORE=redis
AUTH_EMAIL_SUBJECT="[GACHI] Email verification code"
AUTH_EMAIL_VERIFIED_TTL_SECONDS=1800
AUTH_RATE_LIMIT_EMAIL_HMAC_SECRET=replace-with-strong-random-secret
AUTH_RATE_LIMIT_EMAIL_SEND_LIMIT=3
AUTH_RATE_LIMIT_EMAIL_SEND_WINDOW_SECONDS=300
AUTH_RATE_LIMIT_ENABLED=true
AUTH_RATE_LIMIT_KEY_PREFIX=auth:rate-limit:
AUTH_RATE_LIMIT_LOGIN_LIMIT=5
AUTH_RATE_LIMIT_LOGIN_WINDOW_SECONDS=60
AUTH_RATE_LIMIT_TRUSTED_PROXIES=127.0.0.1,::1

# Push notification
NOTIFICATION_PUSH_ENABLED=false
NOTIFICATION_PUSH_PROVIDER=expo
NOTIFICATION_PUSH_CONNECT_TIMEOUT_SECONDS=5
NOTIFICATION_PUSH_READ_TIMEOUT_SECONDS=10
EXPO_PUSH_API_URL=https://exp.host/--/api/v2/push/send
EXPO_PUSH_ACCESS_TOKEN=