# =============================================================================
# @analytics Production Environment
# =============================================================================
# Copy to .env.prod and fill in real values.
# NEVER commit .env.prod to version control.
#
# DNS: analytics.db.transquinnftw.com → vps-0 IP:25434 (TimescaleDB)
# =============================================================================

# TimescaleDB
POSTGRES_USER=lilith
POSTGRES_PASSWORD=CHANGE_ME_STRONG_PASSWORD
POSTGRES_DB=lilith_analytics

# Redis
REDIS_PASSWORD=CHANGE_ME_STRONG_PASSWORD

# Collector CORS (comma-separated allowed origins)
CORS_ORIGINS=https://transquinnftw.com,https://data.transquinnftw.com

# API authentication keys (comma-separated)
# Used by platform-analytics backend-api to authenticate with this API
API_KEYS=CHANGE_ME_GENERATE_WITH_openssl_rand_hex_32

# Collector write key — embed in analytics-client config on the frontend
# Anyone posting to /track/* must include X-Write-Key: <this value>
COLLECTOR_WRITE_KEY=CHANGE_ME_GENERATE_WITH_openssl_rand_hex_32