# Public app URL (used for OIDC redirect URIs, share links, etc.)
NEXT_PUBLIC_APP_URL=https://fam.ginnoir.com

# Postgres
DATABASE_URL=postgres://famapp:famapp@localhost:5432/famapp

# Auth.js
AUTH_SECRET=replace-with-openssl-rand-base64-32

# Local development only. Enables a /login "Dev login" button that creates a
# database session for DEV_LOGIN_EMAIL without contacting Authentik.
ENABLE_DEV_LOGIN=false
DEV_LOGIN_EMAIL=dev@famapp.local
DEV_LOGIN_NAME=Dev User
DEV_HOUSEHOLD_NAME=Home

# OIDC (Authentik)
AUTH_OIDC_ISSUER=https://auth.ginnoir.com/application/o/famapp/
AUTH_OIDC_CLIENT_ID=replace-me
AUTH_OIDC_CLIENT_SECRET=replace-me

# Web Push (generate with: pnpm vapid:generate — copy all three lines to .env)
VAPID_PUBLIC_KEY=
VAPID_PRIVATE_KEY=
VAPID_SUBJECT=mailto:you@example.com

# ntfy (optional fallback channel; leave blank to disable)
NTFY_URL=
NTFY_TOPIC=

# Logging
LOG_LEVEL=info