# ===================================================================
# REQUIRED SETTINGS
# ===================================================================

# Authentication secret key (REQUIRED)
# Generate with: openssl rand -hex 32
AUTH_SECRET=3da6bb307c595fe26273a3796e9da758ac9b388b9fd39e124013f1e59de5c30d

# ===================================================================
# DEPLOYMENT SCENARIOS
# Choose the scenario that matches your setup
# ===================================================================

# ===================================================================
# IMPORTANT: CSRF PROTECTION CONFIGURATION
# ===================================================================

# ORIGIN tells SvelteKit which external URL to expect requests from
# This MUST match how you access your application in their browser
# Examples:
#   Direct Docker access: ORIGIN=http://192.168.0.10:7755
#   Reverse proxy HTTPS: ORIGIN=https://gdluxx.my-cool-domain.com
#   Local development: ORIGIN=http://localhost:7755
# 
# If you have issues with CSRF errors, temporarily disable with:
# DISABLE_CSRF_CHECK=true

# SCENARIO 1: Basic Docker Setup (Most Common)
# For simple Docker deployments accessed via http://localhost:7755
# Just set AUTH_SECRET above and you're done

# SCENARIO 2: HTTP-Only Access (Development/Internal Networks)
# For development or when running over plain HTTP
USE_SECURE_COOKIES=false
AUTH_TRUST_HOST=true
ORIGIN=http://192.168.1.201:7755

# SCENARIO 3: HTTPS with Reverse Proxy (Production)
# For production with Caddy, Nginx, Traefik, etc.
# USE_SECURE_COOKIES=true
# AUTH_TRUST_HOST=true
# ORIGIN=https://gdluxx.my-cool-domain.com

# ===================================================================
# ADVANCED SETTINGS (Optional)
# You probably don't need to change these!
# Only change these if you need custom configuration
# ===================================================================

# Custom port (default: 7755)
# PORT=7755

# Custom host binding (default: 0.0.0.0 for Docker)
# Use 127.0.0.1 for localhost-only access
# HOST=0.0.0.0

# Custom data directory (default: ./data)
# FILE_STORAGE_PATH=/custom/path/to/data