# ============================================================
# Tip4Serv API key (single source of truth for the buyer)
# ============================================================
# If this variable is set, the site calls the Tip4Serv API
# directly from the browser. No database / Edge Function needed.
#
# WARNING (read this carefully):
# This value is bundled into the public JavaScript of the site.
# ANY visitor can open DevTools and read this key.
# Only put a key here if you accept that risk.
#
# Leave this variable EMPTY to fall back to the secure server-side
# proxy (Supabase Edge Function with TIP4SERV_API_KEY secret).

TIP4SERV_API_KEY=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJwZXJtaXNzaW9ucyI6eyJjcmVhdGUiOltdLCJyZWFkIjpbXSwidXBkYXRlIjpbXSwiZGVsZXRlIjpbXSwiMCI6ImNyZWF0ZS1hbGwiLCIxIjoicmVhZC1hbGwiLCIyIjoidXBkYXRlLWFsbCIsIjMiOiJkZWxldGUtYWxsIn0sIndobyI6MTA0MCwiaXNzIjoiaHR0cHM6Ly90aXA0c2Vydi5jb20iLCJhdWQiOiJodHRwczovL2FwaS50aXA0c2Vydi5jb20iLCJuYmYiOjE3NzgyODY2ODcsImlhdCI6MTc3ODI4NjY4N30.bdWT9nR6u3r3wKTRSs5Ng0wBSEf3R12ZqnaYdElyS5o

# ============================================================
# Supabase (only needed if TIP4SERV_API_KEY is empty,
# or if you use other Supabase features like RCON / OG image)
# ============================================================

VITE_SUPABASE_URL=https://nehwevldrxmwagsepgpv.supabase.co
VITE_SUPABASE_ANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Im5laHdldmxkcnhtd2Fnc2VwZ3B2Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzgyNzA3NjQsImV4cCI6MjA5Mzg0Njc2NH0.lRkdLutQNG9OD640O9zU2MBlE79OQkInR6X6Dn8mApk

# ============================================================
# Discord OAuth (optional - to let buyers fetch their Discord ID
# automatically on the checkout page)
# ============================================================
# 1. Create an application at https://discord.com/developers/applications
# 2. In OAuth2 settings, add a redirect URL pointing to:
#    https://your-domain.com/auth/discord/callback
# 3. Paste the Client ID below (public, safe to expose).
# 4. Add the Client Secret as a Supabase Edge Function secret named
#    DISCORD_CLIENT_SECRET (NEVER expose this in the .env that ships
#    to the browser).

VITE_DISCORD_CLIENT_ID=1496952605010821220
DISCORD_CLIENT_SECRET=8I6BVkDW-h6Vj7-iMrRdlLYCdhs2VY8F
