# Variables publiques (exposées au client)
NEXT_PUBLIC_API_BASE=https://your-api-gateway.amazonaws.com/default
NEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co
NEXT_PUBLIC_SUPABASE_ANON_KEY=your-anon-key

# Variables privées (serveur uniquement)
SUPABASE_SERVICE_ROLE_KEY=your-service-role-key
SUPABASE_URL=https://your-project.supabase.co
AWS_REGION=eu-west-3
AWS_SES_FROM="Your App <noreply@yourapp.com>"

# PDFMonkey Configuration
PDFMONKEY_URL=https://api.pdfmonkey.io/api/v1/documents
PDFMONKEY_API_KEY=your-pdfmonkey-api-key

# AWS S3 Configuration pour upload PDF
AWS_ACCESS_KEY_ID=your-aws-access-key
AWS_SECRET_ACCESS_KEY=your-aws-secret-key
AWS_REGION=eu-west-3
AWS_ACCESS_KEY_ID=your-access-key
AWS_SECRET_ACCESS_KEY=your-secret-key
STRUCTURE_API_TOKEN=your-api-token
UPSTREAM_API_BASE=https://your-api-gateway.amazonaws.com/default
UPSTREAM_API_PREFIX=

# DocuSeal direct API (recommended)
DOCUSEAL_API_BASE=https://api.docuseal.com
DOCUSEAL_TOKEN=your-docuseal-token

# Optional: DocuSeal proxy via Lambda/API Gateway (fallback)
DOCUSEAL_PROXY_BASE=https://your-api-gateway.amazonaws.com/default/docuseal

# Development only
AUTH_BYPASS=0
DEBUG_UPSTREAM=0

# Lambda API Authentication
# Used by AWS Lambda to authenticate API calls to Espace Paie
# Generate with: openssl rand -hex 32
LAMBDA_API_KEY=your-lambda-api-key-64-chars-hex
