# Resend API key — get from https://resend.com
RESEND_API_KEY=re_xxxxxxxxxxxxxxxxxxxxxxxx

# Inbox that receives contact-form submissions
CONTACT_INBOX=hello@soroushasadi.ir

# Verified sender domain on Resend
CONTACT_FROM="Soroush Asadi <noreply@soroushasadi.ir>"

# --- Admin CMS ---------------------------------------------------------------
# Single password that unlocks the /admin content panel.
# REQUIRED in production (no default is used when NODE_ENV=production).
# In development it falls back to "admin" if unset.
ADMIN_PASSWORD=change-me-to-a-long-random-string

# Secret used to sign the admin session cookie (HMAC-SHA256).
# Set to a long random value; if unset it derives from ADMIN_PASSWORD.
ADMIN_SESSION_SECRET=another-long-random-string

# Where the SQLite content DB and uploaded images live. On the Docker
# deployment this is a mounted volume so content survives rebuilds.
# Defaults to ./data when unset.
DATA_DIR=./data