env vars

.env.production.example

@@ -1,62 +1,70 @@
 # ==========================================
 # GridPilot Production Environment Example
 # ==========================================
-# Copy this file to .env.production and update with real credentials
+# Copy to `.env.production` and replace placeholders with real values.
+#
+# Do NOT commit real secrets.
 
-# Node Environment
+# ------------------------------------------
+# Runtime
+# ------------------------------------------
 NODE_ENV=production
-
-# ==========================================
-# Database (PostgreSQL)
-# ==========================================
-# Update these with your production database credentials
-DATABASE_URL=postgres://gridpilot_user:YOUR_SECURE_PASSWORD@db:5432/gridpilot_prod
-POSTGRES_DB=gridpilot_prod
-POSTGRES_USER=gridpilot_user
-POSTGRES_PASSWORD=YOUR_SECURE_PASSWORD
-
-# ==========================================
-# Redis Cache
-# ==========================================
-# Update with your production Redis password
-REDIS_URL=redis://:YOUR_REDIS_PASSWORD@redis:6379
-REDIS_PASSWORD=YOUR_REDIS_PASSWORD
-REDIS_HOST=redis
-REDIS_PORT=6379
-
-# ==========================================
-# API Configuration
-# ==========================================
-API_PORT=3000
-API_HOST=0.0.0.0
-
-# ==========================================
-# Website Configuration
-# ==========================================
-# Update with your actual domain
-NEXT_PUBLIC_GRIDPILOT_MODE=alpha
-NEXT_PUBLIC_SITE_URL=https://your-domain.com
-NEXT_PUBLIC_API_URL=https://api.your-domain.com
-NEXT_PUBLIC_DISCORD_URL=https://discord.gg/your-invite-code
 NEXT_TELEMETRY_DISABLED=1
 
-# ==========================================
-# Vercel KV (REQUIRED in Production)
-# ==========================================
-# Get these from: https://vercel.com/dashboard -> Storage -> KV
-KV_REST_API_URL=https://your-kv-rest-api-url.vercel-storage.com
-KV_REST_API_TOKEN=your_kv_rest_api_token_here
+# ------------------------------------------
+# API (NestJS)
+# ------------------------------------------
+GRIDPILOT_API_PERSISTENCE=postgres
+# GRIDPILOT_API_BOOTSTRAP=true
 
-# ==========================================
-# Automation Mode
-# ==========================================
-AUTOMATION_MODE=production
+# Prefer a single connection URL (Docker: host `db`)
+DATABASE_URL=postgres://gridpilot_user:CHANGE_ME@db:5432/gridpilot_prod
+
+# Postgres container vars (used by `docker-compose.prod.yml` -> `db`)
+POSTGRES_DB=gridpilot_prod
+POSTGRES_USER=gridpilot_user
+POSTGRES_PASSWORD=CHANGE_ME
+
+# Redis container vars (used by `docker-compose.prod.yml` -> `redis`)
+REDIS_PASSWORD=CHANGE_ME
+
+# ------------------------------------------
+# Website (Next.js) - public (exposed to browser)
+# ------------------------------------------
+NEXT_PUBLIC_GRIDPILOT_MODE=alpha
+NEXT_PUBLIC_SITE_URL=https://your-domain.com
+
+# Browser → API base URL.
+# If nginx proxies `/api` to the API service, this is typically:
+#   https://your-domain.com/api
+NEXT_PUBLIC_API_BASE_URL=https://your-domain.com/api
+
+NEXT_PUBLIC_DISCORD_URL=https://discord.gg/your-invite-code
+NEXT_PUBLIC_X_URL=https://x.com/your-handle
+
+# Optional site/legal metadata (defaults used when unset)
+# NEXT_PUBLIC_SITE_NAME=GridPilot
+# NEXT_PUBLIC_SUPPORT_EMAIL=support@your-domain.com
+# NEXT_PUBLIC_SPONSOR_EMAIL=sponsors@your-domain.com
+# NEXT_PUBLIC_LEGAL_COMPANY_NAME=Your Company GmbH
+# NEXT_PUBLIC_LEGAL_VAT_ID=DE123456789
+# NEXT_PUBLIC_LEGAL_REGISTERED_COUNTRY=DE
+# NEXT_PUBLIC_LEGAL_REGISTERED_ADDRESS=Street 1, 12345 City
+
+# ------------------------------------------
+# Website (Next.js) - server (NOT exposed to browser)
+# ------------------------------------------
+API_BASE_URL=http://api:3000
+
+# Vercel KV (required in production)
+KV_REST_API_URL=https://your-kv-rest-api-url.vercel-storage.com
+KV_REST_API_TOKEN=CHANGE_ME
+
+# ------------------------------------------
+# Automation / Companion (advanced)
+# ------------------------------------------
+# NOTE: `AUTOMATION_MODE` is deprecated.
+# AUTOMATION_MODE=production
 AUTOMATION_TIMEOUT=30000
 RETRY_ATTEMPTS=3
-SCREENSHOT_ON_ERROR=false
-
-# ==========================================
-# Security & Performance
-# ==========================================
-# Add any additional production-specific variables here
-# Example: API keys, webhook URLs, etc.
+SCREENSHOT_ON_ERROR=false