# --- Postgres ---
DATABASE_URL=postgres://cockpit:cockpit_dev@localhost:55432/cockpit

# --- Authentik OIDC (Story 1.3) ---
# Anlage als „Provider" und „Application" in Authentik unter https://auth.tool-ctrl.de
# → siehe docs/operations.md (kommt in Story 1.7)
AUTHENTIK_ISSUER=https://auth.tool-ctrl.de/application/o/cockpit/
AUTHENTIK_CLIENT_ID=
AUTHENTIK_CLIENT_SECRET=
AUTHENTIK_REDIRECT_URI=http://localhost:3000/api/auth/callback

# --- Session ---
SESSION_COOKIE_NAME=cockpit_session
SESSION_TTL_HOURS=24
SESSION_COOKIE_SECRET=please-change-me-in-prod-at-least-32-chars

# --- Cron Bearer (Story 2.6 + 5.1 + 6.3) ---
CRON_BEARER_TOKEN=please-change-me-in-prod

# --- App ---
NODE_ENV=development
LOG_LEVEL=info
PORT=3000
PUBLIC_BASE_URL=http://localhost:5173