# Production Environment Variables
# Copy this file to .env.production and fill in the values

# Flask app location
FLASK_APP=backend.app:create_app

# Flask secret key (REQUIRED for production)
# Generate with: python3 -c "import secrets; print(secrets.token_hex(32))"
SECRET_KEY=CHANGE_ME_TO_A_RANDOM_SECRET_KEY

# Backend port (defaults to 5001 if not set)
PORT=5001

# CORS origins (use your domain in production, or * to allow all)
CORS_ORIGINS=https://trivia.torrtle.co

# Authelia OIDC Configuration
# REQUIRED: Set these values to match your Authelia instance
OIDC_ISSUER=https://auth.torrtle.co
OIDC_CLIENT_ID=trivia-app
OIDC_CLIENT_SECRET=your_client_secret_here

# OAuth redirect URI (must match your domain)
OIDC_REDIRECT_URI=https://trivia.torrtle.co/api/auth/callback

# Frontend URL (must match your domain)
FRONTEND_URL=https://trivia.torrtle.co

# Cookie security (set to 'true' in production with HTTPS)
SESSION_COOKIE_SECURE=true