# Pesapal Sandbox Credentials
PESAPAL_CONSUMER_KEY=your_sandbox_key
PESAPAL_CONSUMER_SECRET=your_sandbox_secret
PESAPAL_IPN_ID=your_ipn_id

# Application URL for callbacks
PUBLIC_APP_URL=http://localhost:3000

# Supabase (server-only — service role key must NEVER be exposed to the client)
SUPABASE_URL=
SUPABASE_SERVICE_ROLE_KEY=

# Admin notification email (Resend)
RESEND_API_KEY=
ADMIN_NOTIFICATION_EMAIL=info@ameergroupltd.com,dmwanjala254@gmail.com

# Set to production before going live
PESAPAL_ENV=sandbox

# Staff check-in PIN — door staff enter this once per device to unlock the
# "Verify & Check In" button on /verify/:ticketNumber. Keep this secret.
# Minimum 4 characters; alphanumeric recommended.
STAFF_CHECKIN_PIN=change_me_before_deploy

# Supervisor override PIN — used to undo mistaken check-ins. Keep this highly secret.
ADMIN_OVERRIDE_PIN=change_me_before_deploy

# Azure Cognitive Services Translator
AZURE_TRANSLATOR_KEY=your_azure_key_here
AZURE_TRANSLATOR_REGION=eastus
