.env.example

# Database
DATABASE_URL=postgresql://euler:euler@localhost:5432/euler

# Auth.js — generate with: openssl rand -hex 32
AUTH_SECRET=

# Required when behind a reverse proxy
AUTH_TRUST_HOST=true

# GitHub OAuth App (create at github.com/settings/developers)
# Callback URL: http://localhost:5173/auth/callback/github
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=

# Public base URL
ORIGIN=http://localhost:5173

# Code execution
# Solutions execute in a Railway Sandbox (a VM held per user) rather than in this process.
# Without these, the site runs but submissions fail with an explicit error.
# Token: https://railway.com/account/tokens
# Must be spelled exactly this (or RAILWAY_TOKEN for a project token) — the SDK reads no other
# name, and a near miss like RAILWAY_AUTH_TOKEN fails only at the moment someone runs code.
RAILWAY_API_TOKEN=
# The environment sandboxes are created in; also scopes the toolchain checkpoint.
# Only needed locally — Railway injects this into every deployed service already, so a
# deployed app needs nothing but the token above.
RAILWAY_ENVIRONMENT_ID=
# Optional. Sandboxes default to us-west2 regardless of account preference, so this should
# match wherever the services run to keep exec round-trips local. Changing it rebuilds the
# toolchain checkpoint, which belongs to the region it was captured in and boots in no other.
SANDBOX_REGION=us-east4-eqdc4a
# Optional. Concurrent sandboxes; the plan's per-environment cap is the hard ceiling.
MAX_CONCURRENT_RUNS=16