# --- Server (Docker host IP) ---
SERVER_HOST=172.237.44.156

# Authentik HTTP port exposed on the host
COMPOSE_PORT_HTTP=9000
COMPOSE_PORT_HTTPS=9443

# Public URL Authentik uses for OAuth (no trailing slash)
AUTHENTIK_HOST=http://172.237.44.156:9000

# --- Authentik secrets (generate on first setup) ---
PG_PASS=change-me-generate-with-openssl
AUTHENTIK_SECRET_KEY=change-me-generate-with-openssl

# --- OIDC app (after creating provider in Authentik UI) ---
OIDC_APP_SLUG=oidc-demo
OIDC_CLIENT_ID=your-client-id

# --- This project's containers ---
PUBLIC_WEB_URL=http://172.237.44.156
PUBLIC_API_URL=http://172.237.44.156

AUTHENTIK_URL=http://172.237.44.156:9000
OIDC_ISSUER=
OIDC_AUDIENCE=your-client-id

CORS_ORIGIN=http://172.237.44.156