ORIGIN=http://localhost:5173
PORT=3000
OPENSAWER_DB_PATH=./data/opensawer.db
OPENSAWER_SESSION_SECRET=replace-with-at-least-32-random-characters
# Override when the admin must update a mounted env file.
OPENSAWER_ENV_PATH=.env

OPENSAWER_ADMIN_USERNAME=admin
# Local development only. Production requires OPENSAWER_ADMIN_PASSWORD_HASH.
OPENSAWER_ADMIN_PASSWORD=change-me
OPENSAWER_ADMIN_PASSWORD_HASH=

PUBLIC_TURNSTILE_SITE_KEY=
TURNSTILE_SECRET_KEY=
TURNSTILE_ENABLED=false

GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_REDIRECT_URI=http://localhost:5173/auth/google/callback

MIDTRANS_ENV=sandbox
MIDTRANS_MERCHANT_ID=
MIDTRANS_CLIENT_KEY=
MIDTRANS_SERVER_KEY=
# The admin dashboard encrypts both keys when saving them back to this file.
# Set true only for local UI development without Midtrans credentials.
MIDTRANS_MOCK=true

SMTP_HOST=
SMTP_PORT=587
SMTP_USERNAME=
SMTP_PASSWORD=
SMTP_FROM=no-reply@example.com
# SMTP_USER/SMTP_PASS are accepted aliases. Use null to disable TLS for local SMTP catchers.
SMTP_ENCRYPTION=
SMTP_FROM_ADDRESS=
SMTP_FROM_NAME=