From da28f34ea116fe55f537c9633a1002dca8de119f Mon Sep 17 00:00:00 2001
From: shad0w <shardik99@gmail.com>
Date: Wed, 24 Jun 2026 10:03:03 +0000
Subject: [PATCH] docs: add EPFO/PDF microservice env vars

---
 Environment-Variables.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/Environment-Variables.md b/Environment-Variables.md
index 58cb9aa..0a723f7 100644
--- a/Environment-Variables.md
+++ b/Environment-Variables.md
@@ -30,6 +30,11 @@ Server-side env on pms1 lives in `~/pms/App/.env`; locally in `App/.env.local`
 | `FORGEJO_REPO` | optional | optional | `owner/repo` |
 | `FORGEJO_TOKEN` | optional | optional | Token scope `write:issue` |
 | `GST_SERVICE_URL` | optional | optional | GstService base (default `http://localhost:3003`) |
+| `EPFO_SERVICE_URL` | optional | optional | EpfoService base (default `http://localhost:3004`) — crewing UAN/EPFO lookup |
+| `EPFO_LIVE` | optional | optional | EpfoService navigates the real portal when `"true"`; otherwise stubbed (deterministic) |
+| `PDF_SERVICE_URL` | optional | optional | PdfService base (default `http://localhost:3005`) |
+| `PDF_SERVICE_TOKEN` | optional | optional | Shared secret app↔PdfService; **both `PDF_SERVICE_URL` + `PDF_SERVICE_TOKEN` set = “Email to vendor” enabled** |
+| `APP_INTERNAL_URL` | optional | optional | URL PdfService fetches the PO export page at (falls back to `NEXTAUTH_URL`) |
 | `NEXT_PUBLIC_INVENTORY_ENABLED` | optional | optional | Inventory flag — **off only when `"false"`** |
 | `NEXT_PUBLIC_SUBMITTER_VIEW_ALL_ENABLED` | optional | optional | Submitter view-all flag — **on only when `"true"`**. Lets TECHNICAL/MANNING read & export every PO and open History |
 | `NEXT_PUBLIC_ENV_LABEL` | optional | **unset** | When set, shows the non-prod banner (`EnvBanner`). Leave unset in production |
@@ -56,3 +61,8 @@ Server-side env on pms1 lives in `~/pms/App/.env`; locally in `App/.env.local`
   "INTERNAL DEV / STAGING - NOT PRODUCTION" string.
 - **GstService** has its own `PORT` (default 3003); the portal reaches it via
   `GST_SERVICE_URL`. See [Vendors and GST Lookup](Vendors-and-GST-Lookup).
+- **EpfoService / PdfService** have their own `PORT` (3004 / 3005). PdfService
+  powers **Email PO to vendor**: enabled only when both `PDF_SERVICE_URL` and
+  `PDF_SERVICE_TOKEN` are set, and the **same token must reach `pdf-service`**
+  (the deploy exports it from `App/.env`). See
+  [Deployment and Operations](Deployment-and-Operations#microservices).