# Server Configuration
PORT=7130

# PostgreSQL Configuration (optional - defaults shown)
POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres
POSTGRES_DB=insforge

API_BASE_URL=http://localhost:7130
VITE_API_BASE_URL=http://localhost:7130

# Authentication
JWT_SECRET=your-secret-key-here-must-be-32-char-or-above
ADMIN_EMAIL=admin@example.com
ADMIN_PASSWORD=change-this-password

# Encryption key for secrets and database encryption (will use JWT_SECRET if not provided)
ENCRYPTION_KEY=

# API Key (must start with ik_ )
# optional - will be auto-generated if not provided)
ACCESS_API_KEY=ik_your-api-key-here-32-chars-minimum

# Cloud API Host (Optional)
CLOUD_API_HOST=https://api.insforge.dev



# Storage + Logs Configuration
# Storage: Set AWS_S3_BUCKET, AWS_REGION + credentials to use S3 (otherwise uses local filesystem). Use AWS_ENDPOINT_URL for S3-compatible services.
# Logs: Set AWS_REGION + credentials to enable CloudWatch logging (otherwise uses file-based logging)
AWS_S3_BUCKET=
AWS_REGION=
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_ENDPOINT_URL=

# File-based Logs Configuration (used when AWS credentials are not provided)
# Directory where log files will be stored (defaults to ./logs)
LOGS_DIR=


# OpenRouter Configuration
# Get your API key from https://openrouter.ai/keys
OPENROUTER_API_KEY=

# Posthog Configuration (Only needed if running development mode locally)
VITE_PUBLIC_POSTHOG_KEY=

# OAuth Configuration (Optional)
# Google OAuth - Get credentials from https://console.cloud.google.com/
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=

# GitHub OAuth - Get credentials from https://github.com/settings/developers
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=

#Microsoft OAuth - Get credentials from https://portal.azure.com/
MICROSOFT_CLIENT_ID=
MICROSOFT_CLIENT_SECRET=

# Discord OAuth - Get credentials from https://discord.com/developers/applications
DISCORD_CLIENT_ID=
DISCORD_CLIENT_SECRET=

# LinkedIn OAuth - Get credentials from https://www.linkedin.com/developers/apps
LINKEDIN_CLIENT_ID=
LINKEDIN_CLIENT_SECRET=

# X OAuth - Get credentials from https://developer.twitter.com/en/portal/dashboard
X_CLIENT_ID=
X_CLIENT_SECRET=

# Apple OAuth - Get credentials from https://developer.apple.com/account/resources/identifiers/list
# APPLE_CLIENT_ID is your Services ID (e.g., com.yourapp.service)
# APPLE_CLIENT_SECRET must be a JSON string with teamId, keyId, and privateKey (PKCS#8 PEM format from .p8 file)
APPLE_CLIENT_ID=
APPLE_CLIENT_SECRET=

# Multi-tenant Cloud Configuration
# Below only used through cloud available solution
DEPLOYMENT_ID=
PROJECT_ID=
APP_KEY=

# Deno Subhosting Configuration (for serverless functions)
# Get your token from https://dash.deno.com/account#access-tokens
# Get your org ID from your Deno Deploy dashboard
DENO_SUBHOSTING_TOKEN=
DENO_SUBHOSTING_ORG_ID=