swapped to a new db locally hosted

backend/.env.example

@@ -1,3 +1,41 @@
+# Example backend/.env for ECS-FullStack
+# Copy this file to backend/.env and fill values before running the backend
+
+# Postgres connection (required)
+# Example formats:
+# postgres://user:password@host:5432/dbname
+# postgresql://user:password@localhost:5432/dbname
+DATABASE_URL=postgres://postgres:password@127.0.0.1:5432/ecs_fullstack
+
+# Discord OAuth / Bot
+DISCORD_CLIENT_ID=your_discord_client_id
+DISCORD_CLIENT_SECRET=your_discord_client_secret
+DISCORD_BOT_TOKEN=your_discord_bot_token
+
+# Frontend base URL (where the frontend is served). Used for OAuth redirect and dashboard links.
+FRONTEND_BASE=https://discordbot.YOURDOMAIN.com
+
+# Host/port to bind the backend server (bind to 0.0.0.0 or your Tailscale IP as needed)
+HOST=0.0.0.0
+PORT=3002
+
+# CORS origin - set to your frontend origin for tighter security (or '*' to allow all)
+# Example: https://discordbot.YOURDOMAIN.com
+CORS_ORIGIN=http://127.0.0.1:3001
+
+# Twitch API (for the watcher and proxy)
+TWITCH_CLIENT_ID=your_twitch_client_id
+TWITCH_CLIENT_SECRET=your_twitch_client_secret
+TWITCH_POLL_INTERVAL_MS=5000
+
+# Optional bot push receiver settings - allows backend to notify a remote bot process
+# BOT_PUSH_PORT if you run the bot on another host and want the backend to push settings
+BOT_PUSH_PORT=
+BOT_PUSH_URL=
+BOT_SECRET=
+
+# Optional logging level: debug | info | warn | error
+LOG_LEVEL=info
 # Example backend .env
 # Set the host/interface to bind to (for Tailscale use your 100.x.y.z address)
 HOST=0.0.0.0
@@ -10,13 +48,35 @@ FRONTEND_BASE=http://100.x.y.z:3000
 # CORS origin (frontend origin) - set to frontend base for tighter security
 CORS_ORIGIN=http://100.x.y.z:3000
 
-# Optional invite delete protection
-INVITE_API_KEY=replace-with-a-secret
+# Postgres connection (replace user, password, host, port, and database name)
+# Example for your Tailscale IP 100.111.50.59:
+DATABASE_URL=postgres://dbuser:dbpass@100.111.50.59:5432/ecs_db
+
+# Invite token secret (short-lived HMAC tokens for invite delete protection)
+INVITE_TOKEN_SECRET=replace-with-a-long-random-secret
 
 # Discord credentials
 DISCORD_CLIENT_ID=your_client_id
 DISCORD_CLIENT_SECRET=your_client_secret
 DISCORD_BOT_TOKEN=your_bot_token
 
-# Encryption key for backend db.json
+# Encryption key for backend db.json (only needed if you plan to decrypt/migrate old data)
 ENCRYPTION_KEY=pick-a-long-random-string
+
+# --- Twitch API (optional; required for Live Notifications)
+# Register an application at https://dev.twitch.tv to obtain these
+TWITCH_CLIENT_ID=your_twitch_client_id
+TWITCH_CLIENT_SECRET=your_twitch_client_secret
+# Poll interval in milliseconds for the bot watcher (default = 30000 = 30s)
+TWITCH_POLL_INTERVAL_MS=30000
+
+# --- Bot push (optional) - used when backend and bot run on different hosts
+# If the bot runs on a separate host/process, set BOT_PUSH_URL to the public
+# URL the bot exposes for receiving settings pushes (backend will POST there)
+# Example: BOT_PUSH_URL=http://bot-host:4002
+BOT_PUSH_URL=
+# Shared secret used to secure backend -> bot pushes. Must match BOT_SECRET in the bot env.
+BOT_SECRET=replace-with-a-long-random-secret
+# When BOT_PUSH_PORT is set, the bot starts a small HTTP endpoint to accept pushes
+# (only needed if bot runs separately and you want immediate pushes).
+BOT_PUSH_PORT=4002