DATABASE_URL=postgres://postgres:postgres@localhost:5432/chattz

# Authentik OIDC app values
OIDC_CLIENT_ID=replace-me
OIDC_CLIENT_SECRET=replace-me
OIDC_AUTHORIZE_URL=https://auth.example.com/application/o/authorize/
OIDC_TOKEN_URL=https://auth.example.com/application/o/token/
OIDC_USERINFO_URL=https://auth.example.com/application/o/userinfo/
OIDC_REDIRECT_URL=http://localhost:3000/auth/callback
OIDC_SCOPES="openid profile email"

# WebRTC ICE servers (comma-separated). STUN defaults to Google STUN if omitted.
STUN_URLS=stun:stun.l.google.com:19302
TURN_URLS=turn:turn.example.com:3478?transport=udp,turn:turn.example.com:3478?transport=tcp
TURN_USERNAME=replace-me
TURN_PASSWORD=replace-me

# 32+ random chars; used to sign session cookies
SESSION_SECRET=replace-with-long-random-secret
COOKIE_SECURE=false