# Server
PORT=8080
WEBSITE_NAME="workaea.com"
WEBSITE_ORIGIN=https://workaea.com
PUBLIC_SITE_URL=https://workaea.com
# WEBSITE_NAME="localhost:8080"

BROWSERLESS_TOKEN="2UZzYBWM2fANjSu3c224b2e68b3b428772908eb84c1970dce"
GEMINI_API_KEY="AIzaSyCZUEvC7UpwKytYcM5fXRY78UWrBU6Q4Wk"

# GEMINI_API_KEY="AIzaSyCZUEvC7UpwKytYcM5fXRY78UWrBU6Q4Wk" 
GEMINI_API_KEY="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"

# Swapped Gemini -> Groq via shim, so we can switch back if needed without code changes
GROQ_API_KEY="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"

# ---- Firebase Admin (for server-side entitlement writes) ------------------
# Pick ONE method:
#  (a) base64 of the entire serviceAccount.json -- recommended for cPanel
FIREBASE_SERVICE_ACCOUNT_B64=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
#  (b) absolute path to serviceAccount.json on disk
# FIREBASE_SERVICE_ACCOUNT_PATH=/home/USER/secrets/serviceAccount.json
#  (c) discrete vars
# FIREBASE_PROJECT_ID=
# FIREBASE_CLIENT_EMAIL=
# FIREBASE_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n"

# ---- iKhokha (ZAR / SADC) -------------------------------------------------
IK_API_BASE=https://api.ikhokha.com
IK_APPID="IKGBSMA3W2MCU6WPG9NJSAJLBZAECWKP"
IK_APP_SECRET="z1FtTD9Gme17l9gdhMdUw5ruTgejN8wS"
IK_ENTITY_ID="IKGBSMA3W2MCU6WPG9NJSAJLBZAECWKP"
IK_MODE=live

# ---- Pesapal 3.0 (UGX / KES / TZS / USD) ----------------------------------
PESAPAL_API_BASE=https://pay.pesapal.com/v3
PESAPAL_CONSUMER_KEY="ixq3R/9TGcrdsd4d+y0GO7iUlErjRiR3"
PESAPAL_CONSUMER_SECRET="mdw16TTg9s3bdtf4JHyFygCp9J0="
PESAPAL_IPN_ID="add4457a-0866-4f8a-b155-da50618eb430"

# Pesapal Sandbox IPN ID registration Url: https://cybqa.pesapal.com/PesapalIframe/PesapalIframe3/IpnRegistration
# Pesapal Production IPN ID registration Url: https://pay.pesapal.com/iframe/PesapalIframe3/IpnRegistration
# Production IPN for workaea.com/api/pesapal/ipn
# PESAPAL_IPN_ID="add4457a-0866-4f8a-b155-da50618eb430"
# Sandbox IPN for workaea.com/api/pesapal/ipn and localhost:8080/api/pesapal/ipn
# PESAPAL_IPN_ID workaea.com="d9c8e5b0-1ad9-4c8e-9b1a-7f0c8e5b0c123"
# PESAPAL_IPN_ID localhost="d9c8e5b0-1ad9-4c8e-9b1a-7f0c8e5b0c123"
