# Server-side only. Never prefix secrets with PUBLIC_.
OPENRAILS_URL=http://192.168.0.124:8787
OPENRAILS_TOKEN=your-project-api-key
OPENRAILS_NAMESPACE=bliza

# Separate random admin secret: 32–256 printable ASCII characters, without spaces.
# Empty or invalid ADMIN disables every admin route. Generate: openssl rand -hex 32
ADMIN=

# Set false to allow publishing and replies without moderator approval. Default: true.
REQUIRE_APPROVAL=true

# Fictional conversations are opt-in, only when initializing an empty namespace.
SEED_DEMO=false

# Public HTTPS origin. Set consistently when building AND starting every app instance.
# ORIGIN=https://your-portal.example

# Optional isolated release checks, pointing to the updated backend executable:
# OPENRAILS_BACKEND_BIN=/path/to/openrails-backend