.env.example

# Copy to .env.local for running `npm run dev` outside Docker.
# In the Docker stack these are set by docker-compose.yml instead.

# libSQL / SQLite database URL (local file in dev). For an edge deploy, point
# this at a Turso database (libsql://<db>.turso.io) and set DATABASE_AUTH_TOKEN.
DATABASE_URL=file:./data/arena.db
# Turso auth token — only needed for a remote libSQL/Turso database (see DEPLOY.md).
# DATABASE_AUTH_TOKEN=

# Self-hosted Piston sandbox. With the compose stack the port is published on
# localhost, so this works for both `npm run dev` and scripts/install-runtimes.sh.
PISTON_URL=http://localhost:2000

# Max concurrent sandbox jobs (bounded so a burst of submissions can't saturate
# the box and cause false TLEs). Defaults to CPU cores - 1.
# JUDGE_CONCURRENCY=4

# Secret used to sign session cookies. This dev default is REJECTED at runtime
# in production (NODE_ENV=production) — set a real secret before deploying, e.g.
#   node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
AUTH_SECRET=dev-insecure-change-me-in-production

# --- Email verification (optional) ---
# When "true", users must verify their email (6-digit OTP) before they can
# submit. Leave off until an email provider is configured — otherwise codes only
# print to the server console (the dev transport).
# REQUIRE_EMAIL_VERIFICATION=true

# Gmail REST API credentials for sending transactional emails.
# When GMAIL_REFRESH_TOKEN is set, OTP emails are sent for real;
# without it, they're logged to the console (dev).
# GMAIL_CLIENT_ID=your-client-id.apps.googleusercontent.com
# GMAIL_CLIENT_SECRET=your-client-secret
# GMAIL_REFRESH_TOKEN=1//your-refresh-token
# EMAIL_FROM=CodeChef PESUECC <yourchapter@gmail.com>

# --- Cloudflare Turnstile (optional bot check on submit) ---
# Set both to require a Turnstile challenge before a submission is judged. With
# neither set, the widget is hidden and submissions are never challenged.
# Submissions are also rate-limited per user regardless (20/min); runs 40/min/IP.
# TURNSTILE_SECRET_KEY=0x_secret
# NEXT_PUBLIC_TURNSTILE_SITE_KEY=0x_sitekey