PORT=3001
CORS_ORIGIN=http://localhost:8080

# Admin dashboard auth (issue #11) — set to a strong random passphrase
ADMIN_SECRET=

# n8n webhook for email notifications
N8N_WEBHOOK_URL=
PHOTOGRAPHER_EMAIL=hello@lisilou.com
SITE_URL=http://192.168.1.192:8080

# Google Calendar (issue #3)
GOOGLE_CALENDAR_ID=
GOOGLE_SERVICE_ACCOUNT_JSON=

# Contract PDF signature placement (issue #6)
CONTRACT_SIG_X=100
CONTRACT_SIG_Y=700
CONTRACT_SIG_PAGE=1

# OIDC / Authentik (issue #10)
# Issuer is the Authentik provider URL, e.g. https://auth.jerodrigged.com/application/o/lisilou/
# Redirect URI must be registered on the provider, e.g. https://lisilou.jerodrigged.com/api/auth/callback
SESSION_SECRET=
OIDC_ISSUER=
OIDC_CLIENT_ID=
OIDC_CLIENT_SECRET=
OIDC_REDIRECT_URI=
# Authentik group whose members get admin access (default: lisilou-admin)
OIDC_ADMIN_GROUP=lisilou-admin