example.env

# IMPORTANT: NEVER PUT SENSITIVE INFORMATION/SECRETS IN `VITE_` PREFIXED ENV VARIABLES
# All variables prefixed with VITE_ are exposed to client-side code

NX_DB_HOST=localhost
NX_DB_USERNAME=postgres
# NOTE: depending on your configuration, you may need to set the password for the database connection as well as to the postgres user
NX_DB_PASSWORD=
NX_DB_DATABASE=jumpstart
NX_DB_PORT=5432

# Swagger UI: set to true only in local and staging — not in production.
SWAGGER_ENABLED=false

# --- AWS (shared by the S3 and SES modules) ---
# One IAM user's credentials, read by every AWS module. These are the AWS SDK's
# standard variable names, so don't rename them per-service.
# AWS_ACCESS_KEY_ID='ABCDEFGHIJK12345678'
# AWS_SECRET_ACCESS_KEY='bhduerv797887veerfwev78899y87tre'
AWS_REGION='us-east-2'

# --- AWS Cognito ---
# Auth is ENFORCED unless you explicitly opt out. 
# AUTH_DISABLED=true is the only supported way to run the app unauthenticated
# Only "true" and "false" are accepted
AUTH_DISABLED=true


# --- AWS S3 ---
# Set S3_ENABLED=true to enable S3; the credentials above plus the bucket vars
# are only required when it is true (see apps/backend/src/aws/s3/README.md).
S3_ENABLED=false
# Add one env var per S3 bucket (see apps/backend/src/aws/s3/README.md for the full setup steps)
# Example:
# AWS_MY_BUCKET_NAME_1=my-bucket-name-1
# AWS_MY_BUCKET_NAME_2=my-bucket-name2

# --- AWS SES ---
# Set SES_ENABLED=true to enable sends; the vars above plus the sender
# are only required when it is true (see apps/backend/src/aws/ses/README.md).
SES_ENABLED=false
AWS_SES_SENDER_EMAIL='example@example.com'

# Required whenever AUTH_DISABLED is not true
COGNITO_USER_POOL_ID=
COGNITO_CLIENT_ID=
# Optional: derived from the user pool ID (<region>_<id>) when left empty.
COGNITO_REGION=