prod.env.example

# Runtime environment for a deployed instance. Copy to `prod.env` and fill in
# the credentials for the provider(s) you use, then:
#   docker run -p 8000:8000 --env-file prod.env mail-api
#   # or: scripts/deploy.sh docker   (auto-loads ./prod.env if present)
#
# Everything here is OPTIONAL. With no credentials the pure surfaces still work
# (/health, /v1/senders/check, /v1/billing/plans, the dashboard at /app), and the
# money endpoints return a clean `503 billing is not configured`. `prod.env` is
# gitignored — never commit real secrets.

PYTHONUNBUFFERED=1

# --- Mailbox providers (set the one(s) you connect) ---
# Gmail (1Password-backed OAuth refs, or the OP_GMAIL_TOKEN_* triplet)
# GMAIL_OAUTH_OP_REF=op://Vault/Gmail OAuth/client_json
# GMAIL_TOKEN_OP_REF=op://Vault/Gmail OAuth/token_json
# IMAP / iCloud
# IMAP_HOST=imap.gmail.com
# IMAP_USER=you@example.com
# IMAP_PASS=app-password
# Outlook.com (Microsoft Graph)
# OUTLOOK_CLIENT_ID=your-azure-app-client-id
# OUTLOOK_TOKEN_CACHE=/data/outlook_token_cache.json

# --- VOX live-capture transport (optional; no endpoint or provider is pinned) ---
# VOX_BASE_URL=https://your-vox-receiver.example.com
# VOX_RENDER_PROFILE_OP_REF=op://Vault/VOX/render_profile_json
# VOX_ACCESS_TOKEN_OP_REF=op://Vault/VOX/access_token
# VOX_HTTP_TIMEOUT_SECONDS=30

# --- Stripe billing (optional; endpoints 503 until set) ---
# STRIPE_SECRET_KEY=sk_live_...
# STRIPE_PRICE_PRO=price_...
# STRIPE_PRICE_BUSINESS=price_...
# STRIPE_WEBHOOK_SECRET=whsec_...

# Caller-supplied checkout/portal redirect URLs (success_url, cancel_url,
# return_url) are validated against the API's own host to block open-redirect /
# SSRF abuse. If the dashboard is served from a different origin than the API,
# allow it here (comma-separated hostnames).
# UMA_ALLOWED_REDIRECT_HOSTS=uma.4444j99.dev

# --- Audit receipt signing (optional; ephemeral key if unset) ---
# RECEIPT_SIGNING_KEY=base64-or-hex-secret

# --- MCP over Streamable HTTP (set to your host; DNS-rebinding protection on) ---
# MCP_ALLOWED_HOSTS=your-domain.example.com