# Database
DATABASE_URL=postgres://user:password@localhost:5432/forgejo_tickets?sslmode=disable

# Server
PUBLIC_ADDR=:8080
ADMIN_ADDR=:8081
BASE_URL=http://localhost:8080

# Sessions (generate with: openssl rand -hex 32)
SESSION_SECRET=change-me-to-a-random-secret

# Forgejo
FORGEJO_URL=https://forgejo.example.com
FORGEJO_API_TOKEN=your-forgejo-api-token

# Postmark
POSTMARK_SERVER_TOKEN=your-postmark-server-token
POSTMARK_FROM_EMAIL=support@example.com

# OAuth - Google
GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=

# OAuth - Microsoft
MICROSOFT_CLIENT_ID=
MICROSOFT_CLIENT_SECRET=
MICROSOFT_TENANT_ID=common

# OAuth - Apple
APPLE_CLIENT_ID=
APPLE_TEAM_ID=
APPLE_KEY_ID=
APPLE_KEY_PATH=

# Admin (comma-separated Tailscale login names)
TAILSCALE_ALLOWED_USERS=user@example.com