From 23863371dd6f651662eb9eff4ae279464e5b6f1b Mon Sep 17 00:00:00 2001
From: Oscar Holm <87929189+Oscarholm@users.noreply.github.com>
Date: Mon, 8 Jun 2026 09:41:32 +0200
Subject: [PATCH] docs: add .env.example for non-Docker local development
 (#663)

Adds the .env.example file referenced by CONTRIBUTING.md, with the five
required core vars from lib/init.ts plus commented optional extension vars.
Un-ignores it in .gitignore with a !.env.example negation.

Refs #564.

Signed-off-by: Oscar Holm <oscar@numbery.se>
---
 .env.example | 27 +++++++++++++++++++++++++++
 .gitignore   |  3 ++-
 2 files changed, 29 insertions(+), 1 deletion(-)
 create mode 100644 .env.example

diff --git a/.env.example b/.env.example
new file mode 100644
index 00000000..a3383cd5
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,27 @@
+# Local development environment variables.
+# Copy to .env and fill in the values: cp .env.example .env
+
+# ── Required ──────────────────────────────────────────────
+# Supabase project credentials (Dashboard -> Settings -> API)
+NEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co
+NEXT_PUBLIC_SUPABASE_ANON_KEY=your-anon-or-publishable-key
+SUPABASE_SERVICE_ROLE_KEY=your-service-role-or-secret-key
+
+# App base URL (local dev)
+NEXT_PUBLIC_APP_URL=http://localhost:3000
+
+# Secret for authenticating cron/scheduled requests.
+# Any non-empty random string for local dev: openssl rand -hex 16
+CRON_SECRET=generate-a-random-secret
+
+# ── Optional: extension features (core runs without these) ─
+# AI features
+# ANTHROPIC_API_KEY=
+# OPENAI_API_KEY=
+# Bank connections (Enable Banking)
+# ENABLE_BANKING_APP_ID=
+# ENABLE_BANKING_PRIVATE_KEY=
+# Accounting integrations
+# FORTNOX_CLIENT_ID=
+# FORTNOX_CLIENT_SECRET=
+# FORTNOX_REDIRECT_URI=
diff --git a/.gitignore b/.gitignore
index a3b004c5..0ca5f4ec 100644
--- a/.gitignore
+++ b/.gitignore
@@ -33,6 +33,7 @@ yarn-error.log*
 
 # env files (can opt-in for committing if needed)
 .env*
+!.env.example
 
 # vercel
 .vercel
@@ -70,4 +71,4 @@ supabase/.branches/
 /scripts
 
 # Local-only SIE test fixtures — may contain real/scrubbed company data, never commit
-tests/fixtures/sie/
\ No newline at end of file
+tests/fixtures/sie/