# NextAuth
NEXTAUTH_URL=https://app.pieced.ch
NEXTAUTH_SECRET= # openssl rand -base64 32

# ZITADEL OIDC
ZITADEL_ISSUER=https://auth.pieced.ch
ZITADEL_CLIENT_ID=
ZITADEL_CLIENT_SECRET=

# ZITADEL Management API (service account PAT for Option B registration)
ZITADEL_SA_PAT=
ZITADEL_PROJECT_ID=367435120493199793

# LiteLLM (in-cluster)
LITELLM_INTERNAL_URL=http://litellm.inference.svc:4000
LITELLM_MASTER_KEY=

# Portal Database (CloudNativePG)
DATABASE_URL=postgresql://portal:${PORTAL_DB_PASSWORD}@portal-db-rw.pieced-system.svc:5432/portal

# Threema relay (central pieced-threema-gateway)
THREEMA_RELAY_URL=http://pieced-threema-gateway.threema-gateway.svc:8080
THREEMA_RELAY_ADMIN_TOKEN=__from_openbao__