update production setup

.env.docker.production.example

@@ -1,17 +1,66 @@
+# ── Traefik domains — used in docker-compose labels ──────────────────────────
+ACME_EMAIL=admin@rentaldrivego.ma
+MARKETPLACE_DOMAIN=rentaldrivego.ma
+API_DOMAIN=api.rentaldrivego.ma
+DASHBOARD_DOMAIN=dashboard.rentaldrivego.ma
+ADMIN_DOMAIN=admin.rentaldrivego.ma
+PUBLIC_SITE_DOMAIN=rentaldrivego.ma
+PGMANAGE_DOMAIN=pgmanage.rentaldrivego.ma
+
 DATABASE_URL=postgresql://postgres:change-me@postgres:5432/rentaldrivego
 REDIS_URL=redis://redis:6379
+
+# ── API ────────────────────────────────────────────────────────────────────────
 API_PORT=4000
-API_URL=http://localhost:4000
+# SSR server-side calls go via the internal Docker network
 API_INTERNAL_URL=http://api:4000/api/v1
-NEXT_PUBLIC_API_URL=http://localhost:4000/api/v1
-NEXT_PUBLIC_MARKETING_URL=http://localhost:3000
-NEXT_PUBLIC_MARKETPLACE_URL=http://localhost:3000/explore
-NEXT_PUBLIC_DASHBOARD_URL=http://localhost:3001
-NEXT_PUBLIC_ADMIN_URL=http://localhost:3002
-NEXT_PUBLIC_PUBLIC_SITE_DOMAIN=localhost:3003
-DASHBOARD_URL=http://localhost:3001
+# Public-facing API URL visible to browsers — MUST be your real domain, not localhost
+API_URL=https://api.rentaldrivego.ma
+# Baked into Next.js bundles at build time — MUST be set before running `npm run build`
+NEXT_PUBLIC_API_URL=https://api.rentaldrivego.ma/api/v1
+
+# ── Frontend public URLs ───────────────────────────────────────────────────────
+NEXT_PUBLIC_MARKETING_URL=https://rentaldrivego.ma
+NEXT_PUBLIC_MARKETPLACE_URL=https://rentaldrivego.ma/explore
+NEXT_PUBLIC_DASHBOARD_URL=https://dashboard.rentaldrivego.ma
+NEXT_PUBLIC_ADMIN_URL=https://admin.rentaldrivego.ma
+NEXT_PUBLIC_PUBLIC_SITE_DOMAIN=rentaldrivego.ma
+DASHBOARD_URL=https://dashboard.rentaldrivego.ma
+
+# ── CORS ──────────────────────────────────────────────────────────────────────
+# Comma-separated list of allowed browser origins. REQUIRED in production.
+CORS_ORIGINS=https://rentaldrivego.ma,https://dashboard.rentaldrivego.ma,https://admin.rentaldrivego.ma
+
+# ── Auth ──────────────────────────────────────────────────────────────────────
 JWT_SECRET=replace-with-a-long-random-secret
 JWT_EXPIRY=8h
 RENTER_JWT_EXPIRY=7d
+
+# ── Database ──────────────────────────────────────────────────────────────────
 POSTGRES_PASSWORD=replace-with-a-real-password
 NODE_ENV=production
+
+# ── Email (choose one: Resend API or SMTP) ────────────────────────────────────
+# Option A — Resend
+RESEND_API_KEY=re_your_resend_api_key
+EMAIL_FROM=noreply@rentaldrivego.ma
+EMAIL_FROM_NAME=RentalDriveGo
+# Option B — SMTP
+# MAIL_HOST=smtp.rentaldrivego.ma
+# MAIL_PORT=587
+# MAIL_USERNAME=smtp-user
+# MAIL_PASSWORD=smtp-password
+# MAIL_SCHEME=smtp
+# MAIL_FROM_ADDRESS=noreply@rentaldrivego.ma
+# MAIL_FROM_NAME=RentalDriveGo
+
+# ── Firebase push notifications (optional) ────────────────────────────────────
+# FIREBASE_PROJECT_ID=your-firebase-project-id
+# FIREBASE_CLIENT_EMAIL=firebase-adminsdk@your-project.iam.gserviceaccount.com
+# FIREBASE_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n"
+
+# ── Twilio SMS / WhatsApp (optional) ─────────────────────────────────────────
+# TWILIO_ACCOUNT_SID=ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+# TWILIO_AUTH_TOKEN=your_auth_token
+# TWILIO_PHONE_NUMBER=+1234567890
+# TWILIO_WHATSAPP_NUMBER=+1234567890