# Firebase Admin SDK — download from Firebase Console > Project Settings > Service Accounts
FIREBASE_SERVICE_ACCOUNT_PATH=/run/secrets/firebase-service-account.json
# Or paste the JSON inline (useful for cloud envs):
# FIREBASE_SERVICE_ACCOUNT_JSON={"type":"service_account",...}

# Your Firebase project ID
FIREBASE_PROJECT_ID=your-project-id

# RevenueCat webhook shared secret (legacy; prefer signing key below)
# Set this in RevenueCat Dashboard > Project > Integrations > Webhooks > Authorization header
REVENUECAT_WEBHOOK_SECRET=your-revenuecat-webhook-secret

# RevenueCat webhook Ed25519 signing key (modern, preferred)
# Found in RevenueCat Dashboard > Project > Integrations > Webhooks > Webhook signing
REVENUECAT_SIGNING_KEY=base64-ed25519-public-key

# Comma-separated product IDs that grant premium access
REVENUECAT_PREMIUM_PRODUCT_IDS=closer_premium_monthly,closer_premium_yearly

# Rate limits (requests per minute)
RATE_LIMIT_WEBHOOK=10
RATE_LIMIT_HEALTH=30
RATE_LIMIT_DEFAULT=60

# Server port (default 8080)
PORT=8080