BETTER_AUTH_URL="http://localhost:3000"
BETTER_AUTH_SECRET=  # generate with: openssl rand -hex 32

# GitHub OAuth App (for user login)
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=

# GitHub App (for webhooks + API actions)
GITHUB_APP_ID=
GITHUB_APP_PRIVATE_KEY=
GITHUB_WEBHOOK_SECRET=

# GitHub App slug for installation URL (the name in github.com/apps/{slug})
VITE_GITHUB_APP_SLUG=tripwire-dev

DATABASE_URL=

# Unkey rate limiting (optional - allows all requests if not set)
UNKEY_ROOT_KEY=

# Autumn billing
AUTUMN_SECRET_KEY=

# Axiom — used for both evlog wide events and OpenTelemetry traces.
# Create two datasets in Axiom: one for events (logs), one for traces.
AXIOM_TOKEN=
AXIOM_DATASET=
AXIOM_TRACES_DATASET=

# OpenTelemetry traces — set the endpoint to your Axiom edge domain.
# e.g. https://api.axiom.co  (the SDK appends /v1/traces automatically)
OTEL_EXPORTER_OTLP_ENDPOINT=https://api.axiom.co
# Optional: extra headers as "K1=V1,K2=V2". AXIOM_TOKEN and AXIOM_TRACES_DATASET
# above are wired automatically, so this only needs to be set for non-Axiom backends.
OTEL_EXPORTER_OTLP_HEADERS=

# Trace sampling. Defaults to AlwaysOn (every trace exported). When volume
# becomes a concern, switch to `parentbased_traceidratio` and set the ratio.
# OTEL_TRACES_SAMPLER=parentbased_traceidratio
# OTEL_TRACES_SAMPLER_ARG=0.1   # keep 10% of root traces