NODE_ENV=development
PORT=4000
# Public URLs (production defaults for Coolify).
# Local development: use http://localhost:4000 / http://localhost:3001 /
# http://localhost:4000 instead.
PUBLIC_BASE_URL=https://api.altdock.app.amania.jp
WEB_ORIGIN=https://altdock.app.amania.jp
NEXT_PUBLIC_AUTH_MODE=demo
# Vite dev server Host allow-list (comma-separated, or * for any host).
# On Coolify set this to your public domain, e.g. altdock.app.amania.jp
VITE_ALLOWED_HOSTS=altdock.app.amania.jp

# --- Storage (MinIO via docker compose) -------------------------------------
# Leave DATABASE_URL empty to run with an in-memory store instead of Postgres.
# docker-compose.yml keeps MinIO internal-only (no published ports/domain) and
# all uploads flow through the API, so the API uses the internal endpoint.
# When running the API on the host instead of inside compose, re-add MinIO's
# host ports (9000/9001) to docker-compose.yml first.
DATABASE_URL=postgres://altdock:altdock@localhost:5432/altdock
STORAGE_MODE=s3
S3_ENDPOINT=http://localhost:9000
S3_REGION=us-east-1
S3_BUCKET=altdock
S3_ACCESS_KEY_ID=minioadmin
S3_SECRET_ACCESS_KEY=minioadmin123
S3_FORCE_PATH_STYLE=true
# MinIO root credentials, consumed by docker-compose.yml. CHANGE in production.
MINIO_ROOT_USER=minioadmin
MINIO_ROOT_PASSWORD=minioadmin123
# Only needed when MinIO is exposed behind a reverse proxy / domain:
MINIO_SERVER_URL=
MINIO_BROWSER_REDIRECT_URL=

# demo works without an identity provider; production should use generic OIDC.
AUTH_MODE=demo
SESSION_SECRET=replace-with-at-least-32-random-characters
OIDC_ISSUER_URL=
OIDC_CLIENT_ID=
OIDC_CLIENT_SECRET=
OIDC_REDIRECT_URI=https://api.altdock.app.amania.jp/auth/callback

MAX_UPLOAD_BYTES=5368709120
MAX_ARCHIVE_ENTRIES=2048
MAX_EXPANDED_BYTES=8589934592
MAX_SOURCES_PER_WORKSPACE=3
MAX_APPS_PER_SOURCE=20
MAX_STORAGE_BYTES=21474836480
PROCESS_INLINE=true