# Database Configuration
FUSION_DB_PATH=fusion.db

# Authentication
FUSION_PASSWORD=changeme
# Fever API username used to derive api_key=md5(username:password) (default: fusion)
# FUSION_FEVER_USERNAME=fusion
# Explicitly allow empty password (not recommended).
# When password is empty and OIDC is not configured, API auth is disabled.
# FUSION_ALLOW_EMPTY_PASSWORD=false

# Server Configuration
FUSION_PORT=8080

# CORS allowed origins (comma-separated, empty means allow all)
# Example: FUSION_CORS_ALLOWED_ORIGINS=https://app.example.com,https://admin.example.com
# FUSION_CORS_ALLOWED_ORIGINS=

# Allow pulling private/localhost feed URLs (default: false)
# FUSION_ALLOW_PRIVATE_FEEDS=false

# Feed Pull Service Configuration
# Pull interval in seconds (default: 1800 = 30 minutes)
FUSION_PULL_INTERVAL=1800

# Request timeout in seconds (default: 30)
FUSION_PULL_TIMEOUT=30

# Maximum concurrent pulls (default: 10)
FUSION_PULL_CONCURRENCY=10

# Global max scheduling delay in seconds (default: 172800 = 48 hours)
FUSION_PULL_MAX_BACKOFF=172800

# Login rate limiting
# Max failed attempts per window (default: 10)
FUSION_LOGIN_RATE_LIMIT=10
# Window size in seconds (default: 60)
FUSION_LOGIN_WINDOW=60
# Block duration in seconds after limit is exceeded (default: 300)
FUSION_LOGIN_BLOCK=300

# Logging Configuration
# Log level: DEBUG, INFO, WARN, ERROR (default: INFO)
FUSION_LOG_LEVEL=INFO

# Log format: text, json, auto (default: auto)
FUSION_LOG_FORMAT=auto

# OIDC Configuration (optional, enables SSO login when issuer is set)
# OIDC provider URL (e.g., https://auth.example.com/realms/main)
# FUSION_OIDC_ISSUER=

# OAuth2 client ID and secret from your OIDC provider
# FUSION_OIDC_CLIENT_ID=
# FUSION_OIDC_CLIENT_SECRET=

# Callback URL (required when OIDC issuer is configured)
# Must include the callback path: /api/oidc/callback
# Example: FUSION_OIDC_REDIRECT_URI=https://fusion.example.com/api/oidc/callback
# FUSION_OIDC_REDIRECT_URI=

# Restrict login to a specific user identity (email or subject claim, optional)
# FUSION_OIDC_ALLOWED_USER=