.env.example

# Spring profile
SPRING_PROFILES_ACTIVE=prod

# DB
DB_URL=jdbc:postgresql://db:5432/gachi
DB_USERNAME=gachi
DB_PASSWORD=

# AI service routing (if BE calls AI internally)
AI_BASE_URL=http://ai:8000

# AWS S3
AWS_REGION=ap-northeast-2
AWS_S3_BUCKET=
AWS_S3_PUBLIC_BASE_URL=
AWS_S3_IMAGE_PREFIX=images

# Redis
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=

# JWT / Auth
JWT_ISSUER=gachi-be
JWT_SECRET=replace-with-at-least-32-bytes-secret
JWT_ACCESS_TOKEN_MINUTES=15
JWT_REFRESH_TOKEN_DAYS=7
JWT_REFRESH_TOKEN_REMEMBER_DAYS=30
AUTH_CONSENT_VERSION=2026-04-v1

# Email verification policy
AUTH_EMAIL_CODE_TTL_SECONDS=300
AUTH_EMAIL_FROM_ADDRESS=
AUTH_EMAIL_MAX_ATTEMPTS=5
AUTH_EMAIL_REPLY_TO=
AUTH_EMAIL_RESEND_COOLDOWN_SECONDS=60
AUTH_EMAIL_STORE=redis
AUTH_EMAIL_SUBJECT="[GACHI] Email verification code"
AUTH_EMAIL_VERIFIED_TTL_SECONDS=1800
AUTH_RATE_LIMIT_EMAIL_HMAC_SECRET=replace-with-strong-random-secret
AUTH_RATE_LIMIT_EMAIL_SEND_LIMIT=3
AUTH_RATE_LIMIT_EMAIL_SEND_WINDOW_SECONDS=300
AUTH_RATE_LIMIT_ENABLED=true
AUTH_RATE_LIMIT_KEY_PREFIX=auth:rate-limit:
AUTH_RATE_LIMIT_LOGIN_LIMIT=5
AUTH_RATE_LIMIT_LOGIN_WINDOW_SECONDS=60
AUTH_RATE_LIMIT_TRUSTED_PROXIES=127.0.0.1,::1