# ===================================================================
# Excalidraw FULL - Environment Configuration
# ===================================================================

# -------------------------------------------------------------------
# Required: JWT Secret
# -------------------------------------------------------------------
# Must be at least 32 random characters. Used for session signing.
# Generate: openssl rand -base64 32
JWT_SECRET="I0mmE1iNRPSpPhAXheLZ3hVrBqP3PAa8ZEi7DKBxRr8="

# -------------------------------------------------------------------
# Required: Database
# -------------------------------------------------------------------
# Options: postgres | memory | filesystem | kv | s3
# Postgres is required for the workspace product path.
STORAGE_TYPE=postgres
POSTGRES_USER=excalidraw
POSTGRES_PASSWORD=excalidraw
POSTGRES_DB=excalidraw
DATABASE_URL="postgres://excalidraw:excalidraw@lexcalidraw-postgres:5432/excalidraw?sslmode=disable"

# -------------------------------------------------------------------
# Auth Provider (configure ONE of GitHub / OIDC / neither for password-only)
# -------------------------------------------------------------------
# GitHub OAuth
#GITHUB_CLIENT_ID=""
#GITHUB_CLIENT_SECRET=""
#GITHUB_REDIRECT_URL="http://localhost:3002/auth/callback"

# OIDC (generic SSO)
#OIDC_ISSUER_URL=""
#OIDC_CLIENT_ID=""
#OIDC_CLIENT_SECRET=""
#OIDC_REDIRECT_URL="http://localhost:3002/auth/callback"

# -------------------------------------------------------------------
# Optional: OpenAI Proxy
# -------------------------------------------------------------------
OPENAI_API_KEY=sk-ea580c92fbc04318ab1d31f2f01c0b04
OPENAI_BASE_URL=https://api.deepseek.com/v1

# -------------------------------------------------------------------
# Optional: CORS / Deployment
# -------------------------------------------------------------------
# Comma-separated list of allowed origins for CORS
ALLOWED_ORIGINS="http://localhost:3000,http://localhost:3002,http://localhost:5173,https://excalidraw.mildgrim.com,http://192.168.1.6:3002"
# Server bind address
LISTEN_ADDR=":3002"