# Cloudflare API
CLOUDFLARE_API_TOKEN=

# Database
DATABASE_URL=sqlite:data/app.db

# Auth — portal SSO (prod) или локальный admin (dev)
# AUTH_REQUIRED=true → JWT от auth-portal, apps включает cfdm
AUTH_REQUIRED=false
AUTH_JWT_SECRET=dev-secret-change-me
# alias: JWT_SECRET=
AUTH_ISSUER=https://auth.shnt.top
AUTH_PORTAL_URL=http://localhost:5175
# Shared with auth-portal AUDIT_INGEST_SECRET — dual-write audit to portal
AUTH_AUDIT_INGEST_SECRET=dev-audit-ingest-secret
JWT_TTL_HOURS=24

# Legacy local login (только при AUTH_REQUIRED=false)
ADMIN_USERNAME=admin
# Leave empty for dev default password "admin"
ADMIN_PASSWORD_HASH=

# Frontend (Vite) — apps/web/.env.local
# VITE_AUTH_ENABLED=true
# VITE_AUTH_PORTAL_URL=http://localhost:5175
# Публичные URL приложений и integration token: Настройки → Интеграции

# ReUI PRO (apps/web/components.json → @reui Authorization)
# Ключ: https://reui.io/docs/license-setup — класть в .env.local (gitignored)
REUI_LICENSE_KEY=

# Server
SERVER_PORT=8080
STATIC_DIR=
RUST_LOG=info

# Certificate scheduler (cron)
CERT_CHECK_CRON=0 0 */6 * * *

# Local health-check engine (override in UI: Настройки → Health-check)
# HEALTH_CHECK_CRON=0 */2 * * * *
# HEALTH_DEGRADED_FAILURES=1
# HEALTH_DOWN_FAILURES=2
# HEALTH_SUCCESS_RECOVERIES=2
# HEALTH_LATENCY_WARN_MS=1000