From c709d3ef891c18c89e9f94d3b649b08802583064 Mon Sep 17 00:00:00 2001
From: Claw <claw@openclaw>
Date: Sun, 8 Feb 2026 19:58:42 +0000
Subject: [PATCH] chore: Add environment configuration and gitignore

---
 .env.example | 54 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 .gitignore   | 48 ++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 102 insertions(+)
 create mode 100644 .env.example
 create mode 100644 .gitignore

diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..6634f7a
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,54 @@
+# Pantry - Environment Variables Template
+# Copy to .env.development for local development
+# Copy to .env.production for production deployment
+
+# ==============================================
+# Supabase Configuration
+# ==============================================
+
+# Supabase API URL (from Coolify service)
+SUPABASE_URL=https://your-supabase-instance.example.com
+
+# Supabase Anon Key (public, safe to expose to frontend)
+SUPABASE_ANON_KEY=your-anon-key-here
+
+# Supabase Service Role Key (SECRET - server-side only, never expose to frontend)
+SUPABASE_SERVICE_ROLE_KEY=your-service-role-key-here
+
+# JWT Secret (for Supabase Auth)
+SUPABASE_JWT_SECRET=your-jwt-secret-here
+
+# Database Password (for direct PostgreSQL access if needed)
+POSTGRES_PASSWORD=your-postgres-password-here
+
+# ==============================================
+# Application Configuration
+# ==============================================
+
+# Public app URL (where the Nuxt app is hosted)
+PUBLIC_APP_URL=http://localhost:3000
+
+# Node environment
+NODE_ENV=development
+
+# ==============================================
+# External APIs
+# ==============================================
+
+# Open Food Facts API (no auth required)
+OPENFOODFACTS_API_URL=https://world.openfoodfacts.org
+
+# ==============================================
+# Optional: Auth Providers (OIDC)
+# ==============================================
+
+# Google OAuth (optional - configure in Supabase if needed)
+AUTH_GOOGLE_ENABLED=false
+AUTH_GOOGLE_CLIENT_ID=
+AUTH_GOOGLE_SECRET=
+
+# Authentik (optional)
+AUTH_AUTHENTIK_ENABLED=false
+AUTH_AUTHENTIK_URL=
+AUTH_AUTHENTIK_CLIENT_ID=
+AUTH_AUTHENTIK_SECRET=
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..7d45e3d
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,48 @@
+# Environment files (secrets)
+.env
+.env.local
+.env.development
+.env.production
+.env.*.local
+
+# Dependencies
+node_modules/
+.pnp
+.pnp.js
+
+# Nuxt
+.nuxt/
+.output/
+dist/
+
+# IDEs
+.vscode/*
+!.vscode/extensions.json
+!.vscode/settings.json
+.idea/
+*.swp
+*.swo
+*~
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+
+# Testing
+coverage/
+.nyc_output/
+
+# Supabase (local development)
+supabase/.temp/
+supabase/.branches/
+
+# Misc
+*.tsbuildinfo
+.eslintcache