# SuperTokens self-hosted core connection.
# The core is the auth token/session store; the Node backend is the API surface the frontend talks to.
# FamiliarOS uses host port 3568 to avoid colliding with ScriptoriumAI's core on port 3567.
# When running the backend inside the same Docker Compose network, use http://supertokens-core:3567.
# When running the backend on the host, use http://localhost:3568.
SUPERTOKENS_CORE_URI=http://localhost:3568

# Public origins used by SuperTokens for CORS and callback URLs.
API_DOMAIN=http://localhost:3001
WEBSITE_DOMAIN=http://localhost:5173

# SuperTokens path configuration. Keep these in sync with the frontend env vars
# VITE_SUPERTOKENS_API_BASE_PATH and VITE_SUPERTOKENS_WEBSITE_BASE_PATH.
API_BASE_PATH=/auth
WEBSITE_BASE_PATH=/auth

# Cookie security. Set to true when serving over HTTPS in production.
COOKIE_SECURE=false

# GitHub OAuth (disabled by default).
# Leave CLIENT_ID empty to keep GitHub sign-in off. When you are ready, create a GitHub
# OAuth app at https://github.com/settings/developers and set the authorization callback
# URL to: {API_DOMAIN}{API_BASE_PATH}/callback/github
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=

# Optional default plan/role written into the session access token payload for new users.
# Valid plans: free, companion, agent. Valid roles: viewer, operator, reviewer, admin.
DEFAULT_PLAN=free
DEFAULT_ROLE=operator

# Server port.
PORT=3001