NODE_ENV=production
PORT=3000

# Postgres
DATABASE_URL=postgres://octane:changeme@postgres:5432/octane
POSTGRES_PASSWORD=changeme

# Sessions
SESSION_SECRET=change-me-to-a-long-random-string

# Authentik OIDC
AUTHENTIK_ISSUER_URL=https://auth.example.com/application/o/octane-website/
OIDC_CLIENT_ID=
OIDC_CLIENT_SECRET=
OIDC_REDIRECT_URI=https://octane.example.com/auth/callback
ADMIN_GROUP_NAME=octane-admins

# Docker networking (must match the network created by your existing Authentik compose stack)
AUTHENTIK_NETWORK_NAME=authentik_default
APP_PORT=3000