.env.example

  Auth.js ------------------------------------------------------------------
  Generate with: npx auth secret   (or: openssl rand -base64 32)
AUTH_SECRET=

  GitHub OAuth app (https://github.com/settings/developers)
    Homepage URL:  http://localhost:3000
    Callback URL:  http://localhost:3000/api/auth/callback/github
    One app can hold up to 10 callback URLs, so production can reuse this app:
    click "Add callback URL" and add
    https://<your-domain>/api/auth/callback/github
AUTH_GITHUB_ID=
AUTH_GITHUB_SECRET=

  Where the app is reachable. Used for absolute share links.
NEXT_PUBLIC_APP_URL=http://localhost:3000

  Optional: Postgres (Neon) for public /wrapped/<username> snapshots --------
  Without this the app still runs; snapshots live in memory and are lost on
  restart (fine for local development, not for production).
DATABASE_URL=

  How long a stored public snapshot stays fresh, in hours.
WRAPPED_SNAPSHOT_TTL_HOURS=24

  Optional: a read-only token used to build snapshots on demand for public
  /wrapped/<username> pages when no snapshot has been cached yet.
GITHUB_PUBLIC_TOKEN=

  Optional: remote .ttf/.otf for the share-card renderer. Only fetched when
  set; otherwise the font bundled with Next.js is used, and `npm run fonts`
  copies it into public/fonts.
CARD_FONT_URL=

  Optional: shared secret for the snapshot-pruning cron route --------------
  Set this on the project and Vercel Cron sends it as a bearer token to
  /api/cron/prune (see vercel.json). Leave empty to disable the route.
CRON_SECRET=