# OIDC Server Production Environment Configuration
# NEVER commit this file to version control!
# Copy this to .env on your production server

# ===========================================
# Flask Configuration
# ===========================================

# Environment: production
FLASK_ENV=production

# Secret key for session encryption (REQUIRED!)
SECRET_KEY=8a84ce2f0be5f7062f5329d93032c95612547928fe97490e2ca63dea12cc8558

# ===========================================
# Database Configuration
# ===========================================

# PostgreSQL (Production)
# IMPORTANT: Change the password below!
DATABASE_URL=postgresql://oidc_user:P_QbECpV03H6P9zQNuyu0lyLdOySrlr7Rr9HNpVG3aw@postgres:5432/oidc_db
POSTGRES_PASSWORD=P_QbECpV03H6P9zQNuyu0lyLdOySrlr7Rr9HNpVG3aw

# ===========================================
# OIDC Server Configuration
# ===========================================

# OIDC Issuer URL (MUST match your public domain!)
# Change this to your actual domain (e.g., https://auth.yourdomain.com)
OIDC_ISSUER=http://0.0.0.0:5000

# Client Credentials
OIDC_CLIENT_ID=homelab-client
OIDC_CLIENT_SECRET=nQT_E5iVbsGVOcLi8-yHxIF_sgG7UccHMv2GgvBEQ_g

# ===========================================
# Token Lifetimes (in seconds)
# ===========================================

# Access Token lifetime (1 hour)
ACCESS_TOKEN_LIFETIME=3600

# Authorization Code lifetime (10 minutes)
AUTHORIZATION_CODE_LIFETIME=600

# ID Token lifetime (1 hour)
ID_TOKEN_LIFETIME=3600

# ===========================================
# Production Settings
# ===========================================

# Number of Gunicorn workers
WEB_CONCURRENCY=4

# Log Level
LOG_LEVEL=INFO