NODE_ENV=production
PORT=3000

# Postgres
DATABASE_URL=postgres://octane:changeme@postgres:5432/octane
POSTGRES_PASSWORD=changeme

# Sessions
SESSION_SECRET=change-me-to-a-long-random-string

# Set to true to test locally without a real Authentik instance:
# /auth/login shows a simple form to pick a test name instead of redirecting to OIDC.
# NEVER set this to true outside local development.
DEV_BYPASS_AUTH=false

# Authentik OIDC (not needed if DEV_BYPASS_AUTH=true)
AUTHENTIK_ISSUER_URL=https://auth.example.com/application/o/octane-website/
OIDC_CLIENT_ID=
OIDC_CLIENT_SECRET=
OIDC_REDIRECT_URI=https://octane.example.com/auth/callback
ADMIN_GROUP_NAME=octane-admins

# Docker networking (must match the network created by your existing Authentik compose stack)
AUTHENTIK_NETWORK_NAME=authentik_default
APP_PORT=3000