# Database
DATABASE_URL=sqlite:data/app.db

# Auth — portal SSO (prod) или локальный admin (dev)
# AUTH_REQUIRED=true → JWT от auth-portal, apps включает cdn
AUTH_REQUIRED=false
AUTH_JWT_SECRET=dev-secret-change-me
# alias: JWT_SECRET=
AUTH_ISSUER=https://auth.shnt.top
AUTH_PORTAL_URL=http://localhost:5175
# Shared with auth-portal AUDIT_INGEST_SECRET — dual-write audit to portal
AUTH_AUDIT_INGEST_SECRET=dev-audit-ingest-secret
JWT_TTL_HOURS=24

# Legacy local login (только при AUTH_REQUIRED=false)
ADMIN_USERNAME=admin
# Leave empty for dev default password "admin"
ADMIN_PASSWORD_HASH=

# Frontend (Vite) — apps/web/.env.local
# VITE_AUTH_ENABLED=true
# VITE_AUTH_PORTAL_URL=http://localhost:5175

# ReUI PRO (apps/web/components.json → @reui Authorization)
# Ключ: https://reui.io/docs/license-setup — класть в .env.local (gitignored)
REUI_LICENSE_KEY=

# Server
SERVER_PORT=8081
STATIC_DIR=