DATABASE_URL=postgres://postgres:postgres@localhost:5432/chattz
PORT=3000
APP_BASE_URL=http://localhost:3000

# Authentik OIDC app values
OIDC_CLIENT_ID=replace-me
OIDC_CLIENT_SECRET=replace-me
OIDC_AUTHORIZE_URL=https://auth.example.com/application/o/authorize/
OIDC_TOKEN_URL=https://auth.example.com/application/o/token/
OIDC_USERINFO_URL=https://auth.example.com/application/o/userinfo/
OIDC_REDIRECT_URL=http://localhost:3000/auth/callback
OIDC_SCOPES="openid profile email"

# WebRTC ICE servers (comma-separated). STUN defaults to Google STUN if omitted.
STUN_URLS=stun:stun.l.google.com:19302
TURN_URLS=turn:turn.example.com:3478?transport=udp,turn:turn.example.com:3478?transport=tcp
TURN_USERNAME=replace-me
TURN_PASSWORD=replace-me

# Cloudflare R2 media uploads
R2_ACCOUNT_ID=replace-me
R2_ACCESS_KEY_ID=replace-me
R2_SECRET_ACCESS_KEY=replace-me
R2_BUCKET=chattz-media
MEDIA_BASE_URL=https://media.example.com