# Server
PORT=8080
DATABASE_PATH=postflow.db
DATA_DIR=data

# Worker
WORKER_INTERVAL_SECONDS=30
RETRY_BACKOFF_SECONDS=30
DEFAULT_MAX_RETRIES=3

# API/UI security
RATE_LIMIT_RPM=120
API_TOKEN=
# Deprecated for the UI once local auth is enabled; kept as temporary compatibility fallback.
UI_BASIC_USER=
UI_BASIC_PASS=
OWNER_EMAIL=
OWNER_PASSWORD_HASH=

# Logging
LOG_LEVEL=info

# PostFlow driver: mock | live
# ("x" is still accepted as a backward-compatible alias)
POSTFLOW_DRIVER=mock

# Credentials encryption (required)
# Generate with: openssl rand -base64 32
POSTFLOW_MASTER_KEY=

# Public base URL for OAuth callbacks and signed media URLs.
# In production this must be your public HTTPS domain (not localhost).
PUBLIC_BASE_URL=http://localhost:8080

# LinkedIn OAuth app
LINKEDIN_CLIENT_ID=
LINKEDIN_CLIENT_SECRET=

# Meta OAuth app (Facebook/Instagram)
META_APP_ID=
META_APP_SECRET=

# X app credentials
X_CLIENT_ID=
X_CLIENT_SECRET=