.env.example

# MongoDB - point this at the same database backend uses.
# Server-only: never prefix these with NEXT_PUBLIC_, or the connection string ships to the browser.
MONGO_URL=mongodb://127.0.0.1:27017
MONGO_DB=power_interview_ai

# This dashboard's own accounts and sign-in sessions: same cluster, different database.
# Separate from MONGO_DB because these describe operators of the admin tool, not customers of the
# product - nothing in here is a Power Interview user, and backend never reads it.
ADMIN_MONGO_DB=pia_admin

# The built-in admin. REQUIRED: without it nobody can sign in, and nobody can approve anybody.
# The account is created on first boot if it does not exist, and every restart re-asserts it as an
# approved admin - which is what makes a locked-out dashboard recoverable by restarting it.
#
# ADMIN_PASSWORD only ever SEEDS the account. Changing it here does not change an existing
# password, because that would silently undo a change made on the account page the next time the
# process restarted. Set ADMIN_PASSWORD_FORCE_RESET=true for one boot to force it back to this
# value - that is the way in when the password has been forgotten.
ADMIN_EMAIL=admin@example.com
ADMIN_PASSWORD=change-me-at-least-8-chars
# ADMIN_NAME=Administrator
# ADMIN_PASSWORD_FORCE_RESET=true

# Forces the session cookie's Secure flag. Leave unset and the request's scheme decides, which is
# what keeps sign-in working over plain http on localhost and still sets the flag behind TLS.
# Set it to true only if you terminate TLS somewhere that does not send x-forwarded-proto.
# SECURE_COOKIES=true

# Only used when Node's own DNS config is broken, which breaks mongodb+srv:// URLs specifically.
# See src/server/dns.ts. Leave unset unless the default resolvers are unreachable for you.
# DNS_SERVERS=8.8.8.8,1.1.1.1

# SMTP, for the email marketing page (/emails). Leave unset and that page renders read-only:
# the composer and preview still work, sending is disabled with the reason shown.
# Same account backend and the Python bulk sender use. For Resend, SMTP_EMAIL is the literal
# string `resend` and SMTP_PASSWORD is the API key. SMTP_PORT must be an implicit-TLS port.
SMTP_HOST=smtp.resend.com
SMTP_PORT=465
SMTP_EMAIL=resend
SMTP_PASSWORD=re_your_api_key

# Envelope of every campaign. Defaults match what backend and the bulk sender already send as,
# so leaving these unset keeps marketing and transactional mail arriving from one address.
# APP_NAME=Power Interview AI
# EMAIL_FROM_ADDRESS=noreply@vectorleappulse.xyz
# EMAIL_FROM_NAME=Power Interview AI Team

# Prefills the compose page's test-send box.
EMAIL_TEST_ADDRESS=you@example.com

# Pause between recipients during a campaign, holding the run under the provider's rate limit.
# EMAIL_SEND_DELAY_MS=1000

# The public address of backend's API. The "API reference" link on a reseller's portal page
# (/reseller) opens the ReDoc page served at <origin>/redoc. Display only; leave unset to use
# https://api.powerinterviewai.com/api, or point it at a staging backend.
# RESELLER_API_BASE_URL=https://api.powerinterviewai.com/api