.env.example

# ── MAIA Environment Variables ──────────────────────────────────────
# Copy this file to .env and fill in your values.
# See CLAUDE.md "Environment Variables" section for full documentation.

# ── Required ────────────────────────────────────────────────────────

# Public URL of the app. Controls secure cookies, trust proxy, and passkey origin.
# Local development:
PUBLIC_APP_URL=http://localhost:5173
# Production example:
# PUBLIC_APP_URL=https://maia.example.com

# DigitalOcean API token. Master secret used for DO API calls and to derive
# CouchDB password, session secret, admin passphrase, Inference API key,
# and OpenSearch cluster discovery. See CLAUDE.md for derivation details.
DIGITALOCEAN_TOKEN=dop_v1_your-token-here

# S3-compatible credentials for DO Spaces. Cannot be derived from DO token
# because Spaces uses the separate S3 API.
SPACES_AWS_ACCESS_KEY_ID=DO00your-key-here
SPACES_AWS_SECRET_ACCESS_KEY=your-secret-here

# ── Optional ────────────────────────────────────────────────────────

# CouchDB URL. Only needed for local development (Docker CouchDB).
# In production, CouchDB runs on a DO droplet discovered via DO API.
# CLOUDANT_URL=http://localhost:5984

# Gemini API key. Optional — enables Google Gemini as a chat provider.
# Not available on DO Inference, so requires a direct API key.
# GEMINI_API_KEY=AIza...

# Resend API key. Optional — enables email notifications to maia@trustee.ai
# when a new user completes setup or deletes their account. If not set,
# a log message notes that notifications are disabled but nothing else changes.
# RESEND_API_KEY=re_your-key-here

# Resend sender address. Optional — defaults to noreply@maia.healthurl.com
# (verified domain). Set to a different verified domain address if you have one.
# RESEND_FROM_EMAIL=noreply@maia.healthurl.com