# Copy to .env and edit. Never commit .env.

# Server
PORT=5174
HOST=127.0.0.1
NODE_ENV=development

# DB
DATABASE_PATH=./data/clawpost.db

# Secrets backend: "keychain" (uses OS keychain via keytar) or "env" (fallback)
SECRET_BACKEND=keychain

# Master encryption key (only used if SECRET_BACKEND=env; 32-byte hex)
# Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
MASTER_KEY=

# Public callback base URL (used when registering OAuth apps)
# This is the API/server origin that platforms redirect back to (the /oauth/*/callback routes live here).
# For local-only use, keep as http://localhost:5174
PUBLIC_BASE_URL=http://localhost:5174

# Web UI base URL. After an OAuth connect completes, the server redirects the
# browser here (to the React app), NOT back to the API. Keep as the Vite dev
# origin for local use.
WEB_BASE_URL=http://localhost:5173

# Per-platform OAuth app credentials (each AI fills in their OWN values)
# See docs/OAUTH-SETUP.md for how to obtain these.

# X (Twitter) — https://developer.x.com
X_CLIENT_ID=
X_CLIENT_SECRET=

# LinkedIn — https://developer.linkedin.com
LINKEDIN_CLIENT_ID=
LINKEDIN_CLIENT_SECRET=

# Meta (Facebook + Instagram) — https://developers.facebook.com
META_APP_ID=
META_APP_SECRET=

# TikTok — https://developers.tiktok.com
TIKTOK_CLIENT_KEY=
TIKTOK_CLIENT_SECRET=