Refine Docker config and env sample

app/.env.example

@@ -0,0 +1,49 @@
+#
+# Sample environment for docker compose. Copy to .env and adjust.
+#
+# Profiles:
+#   dev  - laptop development (hot reload + localhost ports)
+#   prod - VPS behind Caddy (no public container ports; secrets provided by CI/CD)
+#
+
+COMPOSE_PROFILES=dev
+DOCKER_RESTART_POLICY=unless-stopped
+
+# PostgreSQL
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=postgres
+POSTGRES_DB=avaaz
+POSTGRES_HOST=postgres
+POSTGRES_PORT=5432
+DATABASE_URL=postgresql+psycopg://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}
+
+# Backend
+ENVIRONMENT=development
+SECRET_KEY=dev-secret-change-me
+GUNICORN_WORKERS=4
+GUNICORN_TIMEOUT=120
+OPENAI_API_KEY=
+GOOGLE_API_KEY=
+
+# LiveKit
+LIVEKIT_API_KEY=devkey
+LIVEKIT_API_SECRET=devsecret
+LIVEKIT_LOG_LEVEL=info
+LIVEKIT_WS_URL=ws://livekit:7880
+LIVEKIT_URL=http://livekit:7880
+
+# Frontend
+NEXT_PUBLIC_API_URL=http://localhost:8000
+NEXT_PUBLIC_LIVEKIT_WS_URL=ws://localhost:7880
+
+# Production overrides (supply via secrets/CI, not committed):
+# COMPOSE_PROFILES=prod
+# ENVIRONMENT=production
+# SECRET_KEY=<strong-random-secret>
+# NEXT_PUBLIC_API_URL=https://api.avaaz.ai
+# NEXT_PUBLIC_LIVEKIT_WS_URL=wss://rtc.avaaz.ai
+# LIVEKIT_WS_URL=ws://livekit:7880
+# LIVEKIT_API_KEY=<lk-key>
+# LIVEKIT_API_SECRET=<lk-secret>
+# OPENAI_API_KEY=<openai-key>
+# GOOGLE_API_KEY=<gemini-key>