# TMDB API (server-side only — never NEXT_PUBLIC_)
TMDB_API_KEY=your_tmdb_api_key_here

# Supabase (public — browser client)
NEXT_PUBLIC_SUPABASE_URL=http://localhost:8000
NEXT_PUBLIC_SUPABASE_ANON_KEY=your_anon_key_here

# Supabase (server-side — internal Docker network)
SUPABASE_INTERNAL_URL=http://supabase_kong:8000
SUPABASE_SERVICE_ROLE_KEY=your_service_role_key_here

# Master Admin
MASTER_ADMIN_USERNAME=admin
MASTER_ADMIN_TOTP_SECRET=your_base32_totp_secret_here

# Session encryption (32+ characters)
IRON_SESSION_SECRET=this_must_be_at_least_32_characters_long

# Sentry (optional)
NEXT_PUBLIC_SENTRY_DSN=

# GoTrue (set in docker-compose, not here)
# GOTRUE_EXTERNAL_ANONYMOUS_USERS_ENABLED=true