# Flowplan configuration. Copy to .env (Docker Compose) or .env.local
# (npm run dev) and fill in the values. Full reference:
# https://docs.flowplan.org/configuration

# --- Required ---------------------------------------------------------------

# Public address exactly as typed in the browser (scheme, host, port; no
# trailing slash). Used for sign-in redirects, cookies, passkeys and links.
APP_URL=http://localhost:3000

# --- Sign-in ----------------------------------------------------------------

# E-mail + password and passkeys work without further setup; the first
# account becomes the administrator. "false" leaves only OIDC.
FLOWPLAN_LOCAL_LOGIN=true

# Optional single sign-on with OpenID Connect (Keycloak, Authentik, Zitadel,
# Entra ID, …). Leave OIDC_ISSUER empty to use only e-mail and password.
# Redirect URI at the provider: <APP_URL>/api/auth/callback
OIDC_ISSUER=
OIDC_CLIENT_ID=flowplan
OIDC_CLIENT_SECRET=
OIDC_SCOPES=openid profile email groups
OIDC_GROUPS_CLAIM=groups
# Members of this group administer the instance.
OIDC_ADMIN_GROUP=flowplan-admins
# Optional: only members of this group may sign in.
OIDC_ALLOWED_GROUP=
SESSION_HOURS=8

# --- Storage ----------------------------------------------------------------

# SQLite database, uploads and keys. /app/data in the Docker image.
FLOWPLAN_DATA_DIR=./data
# Optional S3-compatible storage (MinIO, Garage, AWS …): files are mirrored
# there and the database is backed up continuously with Litestream.
S3_BUCKET=
S3_ENDPOINT=
S3_REGION=us-east-1
S3_ACCESS_KEY_ID=
S3_SECRET_ACCESS_KEY=
S3_PREFIX=flowplan

# --- Optional ---------------------------------------------------------------

# E-mail for invitations and digests of unread notifications.
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASSWORD=
SMTP_FROM=

# Web Push (iOS/iPadOS 16.4+ needs HTTPS and installation on the Home
# Screen). Keep both keys stable; if empty they are generated in
# FLOWPLAN_DATA_DIR/web-push-keys.json.
WEB_PUSH_PUBLIC_KEY=
WEB_PUSH_PRIVATE_KEY=
WEB_PUSH_SUBJECT=mailto:admin@example.com

# Speech-to-text for voice notes: an OpenAI-compatible Whisper server.
WHISPER_URL=
WHISPER_MODEL=Systran/faster-whisper-small
WHISPER_LANGUAGE=de

# Default storage quota per workspace in MB (0 = unlimited).
FLOWPLAN_WORKSPACE_QUOTA_MB=
# Number of reverse proxies in front of Flowplan (for the client address).
FLOWPLAN_TRUSTED_PROXIES=1
# At least 16 characters: enables /api/metrics (Prometheus format).
FLOWPLAN_METRICS_TOKEN=

# Legal notice and privacy policy of the operator: shown on the sign-in page,
# under shared pages and forms and in the account menu – only when set.
IMPRINT_URL=
PRIVACY_URL=