FedMCP - Federal Parliamentary Information

# =========================================== # CanadaGPT Frontend Environment Variables # =========================================== # GraphQL API Endpoint NEXT_PUBLIC_GRAPHQL_URL=http://localhost:4000/graphql # GraphQL API Key (Frontend API Key from graph-api) # This key is used to authenticate requests to the GraphQL API # Get this from the graph-api .env file (FRONTEND_API_KEY) # In production, this will be injected from GCP Secret Manager NEXT_PUBLIC_GRAPHQL_API_KEY=your-frontend-api-key-here # Base URL for SEO metadata (canonical URLs, hreflang tags, OpenGraph, sitemap) # Production: https://canadagpt.ca # Development: http://localhost:3000 NEXT_PUBLIC_BASE_URL=https://canadagpt.ca # Environment NODE_ENV=development # =========================================== # Supabase Configuration # =========================================== # Find these values in your Supabase project settings → API # Supabase Project URL NEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co # Supabase Anon/Public Key (safe to expose in client-side code) NEXT_PUBLIC_SUPABASE_ANON_KEY=your-anon-key-here # Supabase Service Role Key (SERVER-ONLY - never expose to client) SUPABASE_SERVICE_ROLE_KEY=your-service-role-key-here # =========================================== # NextAuth Configuration # =========================================== # AUTH_SECRET is used to sign and encrypt NextAuth session tokens # SECURITY WARNING: This is a server-only secret and must NEVER be exposed # in client-side code or Docker build arguments # # Generate a secure random secret with: # openssl rand -base64 32 # # In production, store this in GCP Secret Manager or similar secret storage # and inject it as a runtime environment variable only AUTH_SECRET=your-auth-secret-here # AUTH_TRUST_HOST should be true in production when behind a proxy # This allows NextAuth to trust the X-Forwarded-Host header AUTH_TRUST_HOST=true # NEXTAUTH_URL (optional) - Full canonical URL of your site # Auto-detected in most cases, but can be set explicitly if needed # NEXTAUTH_URL=https://canadagpt.ca