.env.example

# GraphQL API Endpoint
# The URL to the GraphQL API service
# Used for both client-side and server-side requests
PUBLIC_GRAPHQL_ENDPOINT=

# GraphQL API - Read-Only Key (public-facing)
# This key is exposed to the browser and only allows queries (read operations)
# Used on public pages (skills, projects, experience, etc.)
PUBLIC_GRAPHQL_READ_KEY=

# GraphQL API - Write Key (admin-only, server-side only)
# This key allows both queries and mutations (read/write operations)
# NOT prefixed with PUBLIC_ so Vite does not bundle it into client JS.
# Injected server-side by AdminLayout.astro only for authenticated admin pages.
GRAPHQL_WRITE_KEY=

# Legacy environment variables (for backwards compatibility)
# These are still used by server-side scripts (e.g., sync-career-data.js)
GRAPHQL_ENDPOINT=${PUBLIC_GRAPHQL_ENDPOINT}
GRAPHQL_API_KEY=${GRAPHQL_WRITE_KEY}

# Admin Auth
# Secret for signing JWT tokens (generate with: npm run generate-secrets)
AUTH_SECRET=
# Admin username for login
ADMIN_USERNAME=
# Bcrypt hash of admin password (generate with: npm run generate-secrets <password>)
ADMIN_PASSWORD_HASH=

# AI Assistant (optional)
# Anthropic Claude API key for AI-powered features
ANTHROPIC_API_KEY=

# Google OAuth (for Google Drive uploads)
# Get these from Google Cloud Console: https://console.cloud.google.com
GOOGLE_OAUTH_CLIENT_ID=
GOOGLE_OAUTH_CLIENT_SECRET=
GOOGLE_OAUTH_REDIRECT_URI=https://clintonlangosch.com/api/google-oauth-callback

# MongoDB (for OAuth token storage)
# Same MongoDB instance used by api-career-data
MONGODB_URI=
MONGODB_DB_NAME=