.env.example

# ─────────────────────────────────────────────────────────────────────────────
# Copy to .env.local and fill in. Every variable is OPTIONAL.
#
# The site is designed to render, scroll, animate and pass its whole test
# suite with this file empty — that is "degraded mode". Missing credentials
# disable the authenticated features and nothing else. They never crash the
# page, and in production they are never surfaced to a visitor.
#
# All of these are PUBLIC by definition: Vite inlines anything prefixed with
# VITE_ into the client bundle. Never put a service-role key or any other
# secret here.
# ─────────────────────────────────────────────────────────────────────────────

# Supabase project URL, e.g. https://abcdefghijklm.supabase.co
VITE_SUPABASE_URL=

# Supabase anon/publishable key. Safe to ship: it is constrained by row-level
# security, which nexus-schema.sql ENABLEs and FORCEs on public.profiles.
VITE_SUPABASE_ANON_KEY=

# Cal.com booking link used by the "Book a Closed Meeting" dialog.
# Falls back to https://cal.com/ahmed-urlfxup/15min when unset.
# NOTE: the host must also be allowed by the CSP `frame-src` directive in
# index.html. Changing the provider means changing both.
# The default was measured DEAD on 2026-10-02 (cal.com username unclaimed →
# 404). `npm run check:links` fails until a live link is set here or the
# username is registered on cal.com.
VITE_CAL_LINK=

# Canonical origin, used for SEO tags and auth redirect URLs,
# e.g. https://urlifeisup.com
VITE_SITE_URL=