Autonomous changes created by Blitzy

.env.example

@@ -0,0 +1,275 @@
+# =============================================================================
+# DREAMFACTORY ADMIN INTERFACE - ENVIRONMENT CONFIGURATION
+# =============================================================================
+# Next.js Environment Variables Template
+# This file provides examples for all required configuration variables
+# 
+# Variable Naming Convention:
+# - NEXT_PUBLIC_* : Client-accessible variables (exposed to browser)
+# - No prefix     : Server-only variables (secure, not exposed to client)
+#
+# Copy this file to .env.local for development
+# =============================================================================
+
+# =============================================================================
+# CORE APPLICATION CONFIGURATION
+# =============================================================================
+
+# Node.js Environment
+# Values: development | staging | production
+NODE_ENV=development
+
+# Application Version
+# Client-accessible for version display and debugging
+NEXT_PUBLIC_VERSION=1.0.0
+
+# Application Base Path
+# Used for deployments in subdirectories (e.g., /dreamfactory/dist)
+NEXT_PUBLIC_BASE_PATH=/dreamfactory/dist
+
+# =============================================================================
+# DREAMFACTORY API INTEGRATION
+# =============================================================================
+
+# DreamFactory Core API Base URL
+# Client-accessible for frontend API calls
+# Development: http://localhost:80/api/v2
+# Staging: https://staging-api.dreamfactory.com/api/v2
+# Production: https://api.dreamfactory.com/api/v2
+NEXT_PUBLIC_API_URL=http://localhost:80/api/v2
+
+# DreamFactory System API Base URL  
+# Client-accessible for system administration calls
+# Development: http://localhost:80/system/api/v2
+# Staging: https://staging-api.dreamfactory.com/system/api/v2
+# Production: https://api.dreamfactory.com/system/api/v2
+NEXT_PUBLIC_SYSTEM_API_URL=http://localhost:80/system/api/v2
+
+# DreamFactory API Key
+# Client-accessible API key for DreamFactory authentication
+# Generate from DreamFactory Admin Console > Apps > API Key
+NEXT_PUBLIC_DF_API_KEY=your_dreamfactory_api_key_here
+
+# Internal API URL (Server-only)
+# Used for server-side API calls and middleware operations
+# Should not include /api/v2 path - will be appended by client
+INTERNAL_API_URL=http://localhost:80
+
+# Admin API Key (Server-only)
+# High-privilege API key for system operations in middleware
+# Generate from DreamFactory Admin Console with admin permissions
+DF_ADMIN_API_KEY=your_admin_api_key_here
+
+# =============================================================================
+# SECURITY CONFIGURATION
+# =============================================================================
+
+# JWT Secret (Server-only)
+# Must be at least 32 characters, cryptographically secure
+# Generate with: openssl rand -base64 32
+JWT_SECRET=your_jwt_secret_at_least_32_characters_long
+
+# CSRF Protection Secret (Server-only)
+# Used for CSRF token generation and validation
+# Generate with: openssl rand -base64 32
+CSRF_SECRET=your_csrf_secret_at_least_32_characters_long
+
+# Session Secret (Server-only)
+# Used for session encryption and signing
+# Generate with: openssl rand -base64 32
+SESSION_SECRET=your_session_secret_at_least_32_characters_long
+
+# Encryption Key (Server-only)
+# Must be exactly 64 characters (256-bit key)
+# Generate with: openssl rand -hex 32
+ENCRYPTION_KEY=your_64_character_encryption_key_for_sensitive_data_encryption
+
+# Next.js Runtime Secret (Server-only)
+# Used for serverRuntimeConfig in next.config.js
+# Generate with: openssl rand -base64 32
+SERVER_SECRET=your_next_server_runtime_secret_key
+
+# =============================================================================
+# DATABASE CONFIGURATION (if direct database access is needed)
+# =============================================================================
+
+# Database Connection URL (Server-only)
+# Used for direct database connections bypassing DreamFactory
+# Format: postgresql://user:password@host:port/database
+# DATABASE_URL=postgresql://username:password@localhost:5432/dreamfactory
+
+# Redis Cache URL (Server-only, optional)
+# Used for session storage and caching
+# Format: redis://user:password@host:port
+# REDIS_URL=redis://localhost:6379
+
+# =============================================================================
+# EXTERNAL SERVICES INTEGRATION
+# =============================================================================
+
+# Analytics Configuration
+# Google Analytics Measurement ID (Client-accessible)
+NEXT_PUBLIC_GA_MEASUREMENT_ID=G-XXXXXXXXXX
+
+# Server-side Analytics ID (Server-only)
+# Used for server-side analytics and monitoring
+ANALYTICS_ID=your_server_analytics_id
+
+# Calendly Integration (Client-accessible)
+# For meeting scheduling widget integration
+NEXT_PUBLIC_CALENDLY_URL=https://calendly.com/your-organization
+
+# GitHub API Integration (Server-only)
+# For fetching release information and documentation
+GITHUB_TOKEN=your_github_personal_access_token
+
+# =============================================================================
+# DEVELOPMENT CONFIGURATION
+# =============================================================================
+
+# Development Proxy Configuration
+# Used for local development API forwarding
+DEV_PROXY_HOST=localhost
+DEV_PROXY_PORT=80
+
+# Debug Configuration
+# Enable additional logging and debugging features in development
+DEBUG=dreamfactory:*
+
+# Hot Module Replacement
+# Enable/disable HMR for development (true/false)
+NEXT_PUBLIC_HMR_ENABLED=true
+
+# Source Maps
+# Enable source maps for debugging (true/false)
+GENERATE_SOURCE_MAPS=true
+
+# =============================================================================
+# BUILD AND DEPLOYMENT CONFIGURATION
+# =============================================================================
+
+# Build Output Configuration
+# Controls Next.js build output type: standalone | export
+BUILD_OUTPUT=standalone
+
+# Asset Optimization
+# Enable/disable image optimization (true/false)
+IMAGES_OPTIMIZATION=true
+
+# Turbopack Configuration
+# Enable Turbopack for faster builds (true/false)
+TURBOPACK_ENABLED=true
+
+# Bundle Analysis
+# Enable bundle analyzer during build (true/false)
+ANALYZE_BUNDLE=false
+
+# =============================================================================
+# MONITORING AND OBSERVABILITY
+# =============================================================================
+
+# Application Monitoring
+# New Relic License Key (Server-only)
+NEW_RELIC_LICENSE_KEY=your_new_relic_license_key
+
+# DataDog API Key (Server-only)
+DATADOG_API_KEY=your_datadog_api_key
+
+# Sentry DSN (Client-accessible for error tracking)
+NEXT_PUBLIC_SENTRY_DSN=https://[email protected]/project
+
+# Performance Monitoring
+# Enable Web Vitals tracking (true/false)
+NEXT_PUBLIC_WEB_VITALS_ENABLED=true
+
+# Security Event Webhook (Server-only)
+# URL for security event notifications
+SECURITY_WEBHOOK_URL=https://your-security-monitoring-webhook.com/events
+
+# =============================================================================
+# FEATURE FLAGS
+# =============================================================================
+
+# Experimental Features
+# Enable React Compiler optimizations (true/false)
+NEXT_PUBLIC_REACT_COMPILER_ENABLED=true
+
+# Enable Partial Prerendering (true/false)
+NEXT_PUBLIC_PPR_ENABLED=true
+
+# Enable Server Components (true/false)
+NEXT_PUBLIC_SERVER_COMPONENTS_ENABLED=true
+
+# Schema Discovery Features
+# Enable virtual scrolling for large schemas (true/false)
+NEXT_PUBLIC_VIRTUAL_SCROLLING=true
+
+# Maximum tables to display without pagination
+NEXT_PUBLIC_MAX_TABLES_DISPLAY=1000
+
+# =============================================================================
+# CORS AND SECURITY HEADERS
+# =============================================================================
+
+# Allowed Origins (Server-only)
+# Comma-separated list of allowed origins for CORS
+ALLOWED_ORIGINS=http://localhost:3000,https://admin.dreamfactory.com
+
+# Content Security Policy Domains (Server-only)
+# Additional domains for CSP configuration
+CSP_ALLOWED_DOMAINS=assets.calendly.com,api.dreamfactory.com
+
+# =============================================================================
+# VALIDATION SCHEMA REFERENCES
+# =============================================================================
+
+# Environment Validation
+# Enable strict environment variable validation (true/false)
+VALIDATE_ENV=true
+
+# Schema Validation Mode
+# Values: strict | warn | off
+ENV_VALIDATION_MODE=strict
+
+# =============================================================================
+# USAGE EXAMPLES FOR DIFFERENT ENVIRONMENTS
+# =============================================================================
+
+# DEVELOPMENT ENVIRONMENT (.env.local)
+# ------------------------
+# NODE_ENV=development
+# NEXT_PUBLIC_API_URL=http://localhost:80/api/v2
+# NEXT_PUBLIC_SYSTEM_API_URL=http://localhost:80/system/api/v2
+# DEBUG=dreamfactory:*
+# TURBOPACK_ENABLED=true
+
+# STAGING ENVIRONMENT (.env.staging)
+# ------------------
+# NODE_ENV=staging
+# NEXT_PUBLIC_API_URL=https://staging-api.dreamfactory.com/api/v2
+# NEXT_PUBLIC_SYSTEM_API_URL=https://staging-api.dreamfactory.com/system/api/v2
+# GENERATE_SOURCE_MAPS=true
+# ANALYZE_BUNDLE=true
+
+# PRODUCTION ENVIRONMENT (.env.production)
+# ------------------------
+# NODE_ENV=production
+# NEXT_PUBLIC_API_URL=https://api.dreamfactory.com/api/v2
+# NEXT_PUBLIC_SYSTEM_API_URL=https://api.dreamfactory.com/system/api/v2
+# IMAGES_OPTIMIZATION=true
+# GENERATE_SOURCE_MAPS=false
+
+# =============================================================================
+# SECURITY NOTES
+# =============================================================================
+#
+# 1. NEVER commit actual secrets to version control
+# 2. Use different secrets for each environment
+# 3. Rotate secrets regularly (quarterly recommended)
+# 4. Server-only secrets must never be prefixed with NEXT_PUBLIC_
+# 5. Client-accessible secrets should be non-sensitive configuration only
+# 6. Use environment-specific .env files (.env.local, .env.staging, .env.production)
+# 7. Validate all environment variables at application startup
+# 8. Use proper secret management tools for production (AWS Secrets Manager, etc.)
+#
+# =============================================================================