# Synology SSO (OIDC) — values come from DSM > SSO Server > Application
SYNOLOGY_ISSUER=https://cloud.campbellwireless.net/auth/webman/sso
PROTOCOL_HEADER=x-forwarded-proto
HOST_HEADER=x-forwarded-host
SYNOLOGY_CLIENT_ID=
SYNOLOGY_CLIENT_SECRET=

# Auth.js — set the full public URL so callbacks use https
AUTH_URL=https://cloud.campbellwireless.net/trips/auth
# Auth.js secret — generate with: openssl rand -base64 32
AUTH_SECRET=

# Local auth
LOCAL_AUTH_ENABLED=false
LOCAL_AUTH_ARGON2_MEMORY_KB=65536
LOCAL_AUTH_ARGON2_TIME_COST=3
LOCAL_AUTH_ARGON2_PARALLELISM=1
LOCAL_AUTH_MAX_ATTEMPTS=5
LOCAL_AUTH_WINDOW_SECONDS=900
LOCAL_AUTH_LOCKOUT_SECONDS=900

# Admin — comma-separated user IDs (from auth provider) that can access /admin
ADMIN_USER_IDS=

# Database
# SQLite (default):  file:trips.db
# Postgres (future): postgresql://user:password@host:5432/trips
DATABASE_URL=file:trips.db
GADVENTURES_API_KEY=