# Database
DATABASE_URL=sqlite:data/app.db

# Auth JWT (access tokens for apps)
JWT_SECRET=dev-secret-change-me
JWT_TTL_HOURS=1
REFRESH_TTL_DAYS=14
ISSUER=https://auth.shnt.top
# OIDC IdP (defaults to ISSUER). Optional PEM PKCS8 RSA key — otherwise auto-generated in DB.
# OIDC_ISSUER=https://auth.shnt.top
# OIDC_RSA_PRIVATE_KEY=

# Bootstrap admin (created on first start if DB empty)
ADMIN_EMAIL=admin@shnt.top
ADMIN_PASSWORD=admin
ADMIN_NAME=Admin

# Allowed return_to hosts (comma-separated), e.g. .shnt.top or full origins
RETURN_TO_ALLOWLIST=.shnt.top,localhost,private,http://localhost:5173,http://localhost:5174,http://localhost:5176

# ReUI PRO (apps/web/components.json → @reui Authorization)
# Ключ: https://reui.io/docs/license-setup — класть в apps/web/.env.local (gitignored)
REUI_LICENSE_KEY=

# Local app URLs for SSO Open (apps/web/.env.local)
# VITE_VPS_APP_URL=http://localhost:5173
# VITE_CDN_APP_URL=http://localhost:5176
# VITE_RETURN_TO_ALLOWLIST=.shnt.top,localhost,http://localhost:5173,http://localhost:5176

# Server
SERVER_PORT=8080
STATIC_DIR=
LOG_LEVEL=info