.env.example

# ── Notes Printifier — environment ──────────────────────────────────────────
# Copy to .env and adjust. Every variable is OPTIONAL unless noted; the app
# runs fully client-side without any of the server features.

# ── REQUIRED (server mode only) ─────────────────────────────────────────────
# SQLite database for the anonymous usage counter + shared preset links.
# No value = the /api routes fail and server-only features hide themselves.
DATABASE_URL="file:./db/custom.db"

# ── Optional server settings ────────────────────────────────────────────────
# Set to 1 when the app runs behind a reverse proxy that OVERWRITES (not
# appends to) X-Forwarded-For / X-Real-IP. Without it, forwarded headers are
# treated as client-spoofable and rate limiting falls back to per-user-agent
# buckets. See src/lib/rate-limit.ts.
TRUST_PROXY=

# Content-Security-Policy frame-ancestors for self-hosted deployments.
# Default: 'self' (blocks cross-origin clickjacking). Set to * (or a host
# list) only if you must embed the app in a dashboard from another origin.
FRAME_ANCESTORS='self'

# ── AI features (Print Doctor / voice commands / spoken receipts) ───────────
# Backed by z-ai-web-dev-sdk. The SDK reads its credentials from the
# standard Z_AI_* environment variables (or its own config file). When no
# credentials exist the AI routes answer with deterministic local heuristics
# instead — the app degrades gracefully, nothing crashes, nothing is sent
# to a third-party LLM.
# Z_AI_API_KEY=...
# Z_AI_BASE_URL=...

# ── Build-time flags (usually set by workflows/scripts, not here) ───────────
# NEXT_PUBLIC_STATIC=1   → compile server-only features OUT (static export / APK;
#                          scripts/static-export.sh sets this automatically)
# NEXT_PUBLIC_BASE_PATH=/Notes-printifier   → serve under a subpath (GitHub Pages)
# STATIC_EXPORT=1        → switches next.config.ts to output:"export"