APP_BASE_URL=https://eb.bitli.se
AUTH_SESSION_SECRET=replace-with-a-long-random-secret

# Engångstoken för att konfigurera OIDC via API innan auth är aktiverat.
# Skickas som headern "x-setup-token". Lämna tom om du konfigurerar via env-variablerna nedan.
SETUP_TOKEN=replace-with-a-long-random-value

# Pocket ID OIDC
OIDC_ISSUER=https://pocketid.example.com
OIDC_CLIENT_ID=replace-with-pocketid-client-id
OIDC_CLIENT_SECRET=replace-with-pocketid-client-secret
OIDC_REDIRECT_URI=https://eb.bitli.se/auth/callback
OIDC_SCOPE=openid profile email groups

# Optional allow-lists
OIDC_ALLOWED_GROUPS=
OIDC_ALLOWED_EMAILS=
OIDC_ALLOWED_DOMAINS=