# ===================================================================
# Excalidraw FULL - Environment Configuration
# ===================================================================

# -------------------------------------------------------------------
# Required: JWT Secret
# -------------------------------------------------------------------
# Must be at least 32 random characters. Used for session signing.
# Generate: openssl rand -base64 32
JWT_SECRET="YOUR_SUPER_SECRET_RANDOM_STRING_MIN_32_CHARS"

# -------------------------------------------------------------------
# Required: Database
# -------------------------------------------------------------------
# Options: postgres | memory | filesystem | kv | s3
# Postgres is required for the workspace product path.
STORAGE_TYPE=postgres
DATABASE_URL="postgres://excalidraw:excalidraw@localhost:5432/excalidraw?sslmode=disable"

# -------------------------------------------------------------------
# Auth Provider (configure ONE of GitHub / OIDC / neither for password-only)
# -------------------------------------------------------------------
# GitHub OAuth
GITHUB_CLIENT_ID=""
GITHUB_CLIENT_SECRET=""
GITHUB_REDIRECT_URL="http://localhost:3002/auth/callback"

# OIDC (generic SSO)
OIDC_ISSUER_URL=""
OIDC_CLIENT_ID=""
OIDC_CLIENT_SECRET=""
OIDC_REDIRECT_URL="http://localhost:3002/auth/callback"

# -------------------------------------------------------------------
# Optional: OpenAI Proxy
# -------------------------------------------------------------------
OPENAI_API_KEY=""
OPENAI_BASE_URL="https://api.openai.com"

# -------------------------------------------------------------------
# Optional: CORS / Deployment
# -------------------------------------------------------------------
# Comma-separated list of allowed origins for CORS
ALLOWED_ORIGINS="http://localhost:3000,http://localhost:3002,http://localhost:5173"
# Server bind address
LISTEN_ADDR=":3002"