Initial commit (unpacked platform)

.env.example

@@ -0,0 +1,73 @@
+# ============================================================
+# Miljövariabler (varumärke: se brand.config.json)
+# Kopiera till .env och fyll i. .env checkas ALDRIG in.
+# Produktion: AWS SSM/Secrets Manager (spec §50, §56).
+# ============================================================
+
+# --- Core ---
+NODE_ENV=development
+API_PORT=4000
+API_BASE_URL=http://localhost:4000
+CORS_ORIGINS=http://localhost:5173
+LOG_LEVEL=info
+
+# --- Databas (separat databas + minsta möjliga privilegier, spec §52) ---
+DATABASE_URL=postgres://app_user:app_dev_password@localhost:5432/app
+
+# --- Redis (BullMQ-köer + cache) ---
+REDIS_URL=redis://localhost:6379
+
+# --- Auth ---
+JWT_ACCESS_SECRET=dev-only-change-me
+JWT_REFRESH_SECRET=dev-only-change-me-too
+JWT_ACCESS_TTL_SECONDS=900
+JWT_REFRESH_TTL_SECONDS=2592000
+
+# --- Entitlements (signerad token med grace period, spec §44) ---
+ENTITLEMENT_SIGNING_SECRET=dev-only-change-me-three
+ENTITLEMENT_TTL_HOURS=24
+ENTITLEMENT_GRACE_DAYS=7
+
+# --- S3 (spec §53). mock = lokal lagring (dev). aws = RIKTIG S3 (AWS eller
+# --- S3-kompatibel som MinIO/R2 via S3_ENDPOINT). Tomma nycklar = IAM-roll. ---
+S3_MODE=mock
+S3_BUCKET=   # default: <brand-slug>-production
+S3_REGION=eu-north-1
+S3_ENDPOINT=
+S3_ACCESS_KEY_ID=
+S3_SECRET_ACCESS_KEY=
+
+# --- AAMOS (befintlig AI-plattform; nås ENDAST från backend, spec §31, §61.13) ---
+# AAMOS_MODE=http i alla riktiga miljöer. mock finns för lokal utveckling/test utan nätverk.
+AAMOS_MODE=http
+AAMOS_API_URL=
+AAMOS_API_KEY=
+AAMOS_TIMEOUT_MS=60000
+
+# --- Prenumerationer (spec §45–47) ---
+APPLE_BUNDLE_ID=   # default ur brand.config.json
+APPLE_ISSUER_ID=
+APPLE_KEY_ID=
+APPLE_PRIVATE_KEY_PATH=
+GOOGLE_PACKAGE_NAME=   # default ur brand.config.json
+GOOGLE_SERVICE_ACCOUNT_JSON_PATH=
+
+# --- Push-notiser ---
+EXPO_PUSH_ENABLED=false
+
+# --- Admin ---
+ADMIN_PORT=5173
+VITE_API_BASE_URL=http://localhost:4000
+
+# --- Larm (valfritt): 5xx-fel och fallerade jobb POST:as som {"text": "..."} ---
+ERROR_WEBHOOK_URL=
+
+# --- E-post: log = mejl till loggen (dev). smtp = RIKTIGA mejl via valfri
+# --- SMTP-leverantör (SES/Postmark/Resend/Brevo/egen server). ---
+EMAIL_MODE=log
+SMTP_HOST=
+SMTP_PORT=587
+SMTP_SECURE=false
+SMTP_USER=
+SMTP_PASS=
+MAIL_FROM=