# ═══════════════════════════════════════════════════════════════════
# Tiger Control Plane — Environment Variables
#
# Copy this file:
#   For the dashboard:  dashboard/.env.local
#   For the bridge:     bridge/.env
#
# NEVER commit real secrets to git. .env.local is in .gitignore.
# ═══════════════════════════════════════════════════════════════════

# ── Tiger Bridge (used by BOTH the bridge server AND the dashboard) ──
#
# The shared secret token — must match on both sides.
# Generate a strong random value:
#   openssl rand -hex 32
TIGER_BRIDGE_TOKEN=change-me-generate-with-openssl-rand-hex-32

# ── Bridge server config (bridge/.env only) ─────────────────────────
#
# Port the bridge listens on (localhost only — Caddy proxies HTTPS)
TIGER_BRIDGE_PORT=3456

# Only accept connections from localhost (Caddy is the public face)
TIGER_BRIDGE_HOST=127.0.0.1

# CORS: allow requests from the dashboard origin
# In production: https://agent.manohargupta.com
# In development: http://localhost:3000
ALLOWED_ORIGIN=https://agent.manohargupta.com

# ── Dashboard config (dashboard/.env.local only) ────────────────────
#
# URL the Next.js server uses to call the bridge (server-to-server)
# In production: http://localhost:3456 (same machine)
# In development: http://localhost:3456
TIGER_BRIDGE_URL=http://localhost:3456

# ── Next.js public URL (for absolute URLs in emails, etc.) ──────────
NEXT_PUBLIC_APP_URL=https://agent.manohargupta.com