# Optional backend logging level.
LOG_LEVEL=INFO

# Optional SMTP settings for the Users -> message popup.
SMTP_HOST=smtp.example.com
SMTP_PORT=587
SMTP_USERNAME=your-smtp-username
SMTP_PASSWORD=your-smtp-password
SMTP_FROM_ADDRESS=no-reply@example.com
SMTP_FROM_NAME=Manage
SMTP_USE_TLS=true
SMTP_USE_SSL=false
SMTP_TIMEOUT=30

# Machine/service configuration now lives in the app's Settings tab.
# The built-in local machine is seeded automatically.
#
# For a remote SSH machine, the backend still needs access to a private key
# file. Compose mounts a single host key file as a Docker secret instead of the
# whole ~/.ssh directory.
#
# Host-side path used by Docker Compose secret definitions:
SSH_KEY_HOST_PATH=/absolute/path/to/id_ed25519
# The container-side path is fixed by the app and Compose at:
# /run/secrets/ssh_private_key

# For deployment with traefik
FRONTEND_APP_NAME=manage
FRONTEND_APP_HOST=manage.example.com
FRONTEND_APP_PORT=5173

BACKEND_APP_NAME=management-api
BACKEND_APP_HOST=management-api.example.com
BACKEND_APP_PORT=8000

CERT_RESOLVER=lets-encrypt

# Authentik / OIDC
# Backend validates every API request with a Bearer JWT.
AUTH_ENABLED=true
OIDC_ISSUER_URL=https://authentik.example/application/o/media-library-viewer/
OIDC_AUDIENCE=media-library-viewer
OIDC_JWKS_URL=
OIDC_CLOCK_SKEW_SECONDS=30

# Frontend OIDC settings (Vite build/runtime env)
VITE_OIDC_ENABLED=true
VITE_OIDC_ISSUER=https://authentik.example/application/o/media-library-viewer/
VITE_OIDC_CLIENT_ID=media-library-viewer
VITE_OIDC_SCOPE=openid profile email
VITE_OIDC_REDIRECT_URI=http://localhost:8080/
VITE_OIDC_POST_LOGOUT_REDIRECT_URI=http://localhost:8080/