# Database — required. Use `pnpm db:up` to start a local PostgreSQL via Docker.
DATABASE_URL=postgresql://onecli:onecli@localhost:5432/onecli

# Auth — single-user mode by default (no login required).
# To enable Google OAuth login (multi-user), set NEXTAUTH_SECRET and the Google credentials below.
# Generate with: openssl rand -hex 32
NEXTAUTH_SECRET=

# Gateway auth mode — "local" skips JWT validation (single-user dev), "oauth" validates NextAuth cookies.
AUTH_MODE=local

# Google OAuth (for login — works in both auth modes)
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=

# Secret encryption key for encrypting stored secrets (API keys, tokens, etc.)
# Auto-generated on first container start if not set.
# Only set this if you need a specific key (e.g., migrating data between instances).
# Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('base64'))"
SECRET_ENCRYPTION_KEY=change-me-to-secure-key

# Gateway URL for client-side API calls
NEXT_PUBLIC_GATEWAY_URL=http://localhost:10255