# Server Configuration
PORT="8080"
HOSTNAME_DENO="localhost"
DEVELOPMENT="true"  # Set to "false" for production

# File Storage Paths
KV_CACHE_PATH="./data"
# Local PostgreSQL connection (update user/password/database to match your machine)
POSTGRES_OPTIONS=""

# Datona Sandbox Specific
SANDBOX_MODE="true"
DISABLE_EXTERNAL_APIS="true"
LOCAL_DEV_MODE="true"

# Stripe Configuration
# STRIPE_SECRET_KEY: Secret key for Stripe API (server-side use only)
# Get this from your Stripe Dashboard: https://dashboard.stripe.com/apikeys
# Example: sk_test_51AbCdEfGhIjKlMnOpQrStUvWxYz1234567890
STRIPE_SECRET_KEY=""

# STRIPE_WEBHOOK_SECRET: Secret used to verify Stripe webhook signatures
# Get this from your Stripe Dashboard: https://dashboard.stripe.com/webhooks
# Example: whsec_1234567890abcdef1234567890abcdef1234567890abcdef
STRIPE_WEBHOOK_SECRET=""

# STRIPE_PUBLISHABLE_KEY: Publishable key for Stripe.js (client-side use)
# Get this from your Stripe Dashboard: https://dashboard.stripe.com/apikeys
# Example: pk_test_51AbCdEfGhIjKlMnOpQrStUvWxYz1234567890
STRIPE_PUBLISHABLE_KEY=""

# Microsoft Azure AD Authentication
# AUTHORITY: Microsoft authority URL for authentication
# Format: https://login.microsoftonline.com/{tenantId}
# Get tenantId from Azure Portal: https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade
# Example: https://login.microsoftonline.com/8a8b8c8d-9e9f-0a0b-1c2d-3e4f5a6b7c8d
AUTHORITY=""

# CLIENT_ID: Microsoft application client ID (from Azure AD app registration)
# Get this from Azure Portal: https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade
# Navigate to your app registration and copy the Application (client) ID
# Example: 12345678-1234-1234-1234-123456789012
CLIENT_ID=""

# CLIENT_SECRET: Microsoft application client secret (server-side use only)
# Get this from Azure Portal: https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade
# Navigate to your app registration > Certificates & secrets > New client secret
# IMPORTANT: This secret is used server-side only and should never be committed to version control
# Example: abcdefghijklmnopqrstuvwxyz1234567890
CLIENT_SECRET=""

# TENANT_ID: Microsoft Azure tenant ID
# Get this from Azure Portal: https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade
# Navigate to your app registration and copy the Directory (tenant) ID
# Example: 8a8b8c8d-9e9f-0a0b-1c2d-3e4f5a6b7c8d
TENANT_ID=""

# REDIRECT_URI: OAuth redirect URI (must match Azure AD app registration)
# This must exactly match the Redirect URI configured in your Azure AD app registration
# For local development: http://localhost:8080/auth/callback
# For production: https://yourdomain.com/auth/callback
# Example: http://localhost:8080/auth/callback
REDIRECT_URI=""

# TOKEN_URL: Token endpoint URL for OAuth token exchange
# Format: https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token
# Example: https://login.microsoftonline.com/8a8b8c8d-9e9f-0a0b-1c2d-3e4f5a6b7c8d/oauth2/v2.0/token
TOKEN_URL=""

# REDIRECT_HOME: Redirect home URL (base URL for the application)
# This is the base URL where users are redirected after authentication
# For local development: http://localhost:8080
# For production: https://yourdomain.com
# Example: http://localhost:8080
REDIRECT_HOME=""