# Copy to .env and fill in. .env is gitignored — never commit real secrets.
#
# The 2018 version of this project committed its live database password to the
# repository, which is why it now has to be treated as compromised. Keep secrets
# in .env, and keep .env out of git.

# --- Required --------------------------------------------------------------
# JWT signing key. Minimum 32 characters; the API refuses to start without it.
# Generate one with:  openssl rand -base64 48
JWT_KEY=

# --- First-run seeding ------------------------------------------------------
# On a database with no users, the API creates this account and imports the 105
# games recovered from the 2018 MySQL dump. Once a user exists, this is ignored.
# Password rules: 12+ chars, upper, lower and a digit.
SEED_USERNAME=ckoch
SEED_EMAIL=you@example.com
SEED_PASSWORD=

# Set to false once you are past first run, or to start with an empty library.
SEED_ENABLED=true

# --- Optional ---------------------------------------------------------------
# Host port the web UI is published on.
WEB_PORT=8080

# Token lifetime in minutes. Default is 12 hours; there is no refresh flow, so
# expiry returns you to the login form.
JWT_LIFETIME_MINUTES=720

JWT_ISSUER=LudosData
JWT_AUDIENCE=LudosData
CORS_ORIGIN=http://localhost:8080