1# AI Software Factory — web app environment 2# Copy to .env.local and adjust. NEXT_PUBLIC_* values are inlined into the 3# browser bundle at build time — never put secrets in NEXT_PUBLIC_ vars. 4 5# Base URL of the NestJS API (see apps/api). No trailing slash. 6NEXT_PUBLIC_API_URL=http://localhost:4000/api/v1 7 8# WebSocket endpoint of the realtime service (see apps/realtime). 9# The access token is passed as a ?token= query param on connect. 10NEXT_PUBLIC_WS_URL=ws://localhost:4001 11 12# Public URL of this web app (used for share links, redirects, CSRF origin). 13NEXT_PUBLIC_APP_URL=http://localhost:3000 14 15# Server-side only (used by /api BFF route handlers, if any are added): 16# The httpOnly factory_session cookie is set by the API at /auth/login and 17# refreshed at /auth/refresh; the web app must never read it from JS. 18# API_INTERNAL_URL=http://localhost:4000/api/v1 19# SESSION_COOKIE_NAME=factory_session 20