for deploy

.env.example

@@ -1,23 +1,28 @@
-# Database
-DATABASE_URL=sqlite+aiosqlite:///./trumpsignal.db
-# For Postgres in production:
-# DATABASE_URL=postgresql+asyncpg://user:password@host:5432/trumpsignal
+# ── Database ─────────────────────────────────────────────────────────────────
+# For Docker Compose — only POSTGRES_PASSWORD needs to be set;
+# DATABASE_URL is built automatically by docker-compose.yml.
+# For local dev without Docker, set DATABASE_URL directly:
+# DATABASE_URL=sqlite+aiosqlite:///./trumpsignal.db
+POSTGRES_PASSWORD=change_me_in_production
 
-# Frontend origin for CORS
-FRONTEND_URL=http://localhost:3001
+# ── CORS / Frontend ──────────────────────────────────────────────────────────
+# Your frontend origin — no trailing slash
+FRONTEND_URL=https://yourdomain.com
 
-# AI provider (OpenAI-compatible). Default below is gptsapi.net relay for Claude.
+# ── Encryption ───────────────────────────────────────────────────────────────
+# KEK for envelope-encrypting HL API keys in DB.
+# Generate: openssl rand -hex 32
+# WARNING: rotating this invalidates all stored keys.
+ENCRYPTION_KEY=
+
+# ── AI provider ──────────────────────────────────────────────────────────────
 AI_API_KEY=
 AI_BASE_URL=https://api.gptsapi.net/v1
 AI_MODEL=claude-sonnet-4-6
 
-# Hyperliquid — leverage & network only. Per-user API keys are stored in DB.
-HL_LEVERAGE=3
+# ── Hyperliquid ──────────────────────────────────────────────────────────────
 HL_MAINNET=true
 
+# ── Runtime ──────────────────────────────────────────────────────────────────
 # development | production
-ENVIRONMENT=development
-
-# KEK for envelope-encrypting HL API keys in the DB.
-# Generate: `openssl rand -hex 32`. ROTATING THIS INVALIDATES ALL STORED KEYS.
-ENCRYPTION_KEY=
+ENVIRONMENT=production