# Database
DATABASE_URL="postgresql://drinktracker:YOUR_PASSWORD@localhost:5432/drinktracker"
POSTGRES_USER="drinktracker"
POSTGRES_PASSWORD="YOUR_PASSWORD"
POSTGRES_DB="drinktracker"

# NextAuth
# Must be the exact public origin, with NO trailing slash. Beyond login redirects
# it is the OAuth `issuer` and the MCP `resource` identifier, and connectors
# compare both byte-for-byte - a mismatch fails discovery with no useful error.
NEXTAUTH_URL="http://localhost:3000"
NEXTAUTH_SECRET="generate-with: openssl rand -base64 32"
AUTH_TRUST_HOST="true"  # Set to true when behind a reverse proxy


# MinIO / S3-compatible storage
MINIO_ENDPOINT="localhost"
MINIO_PORT="9000"
MINIO_ACCESS_KEY="generate-a-strong-access-key"
MINIO_SECRET_KEY="generate-a-strong-secret-key"
MINIO_BUCKET="drink-images"
MINIO_USE_SSL="false"

# Encryption (for API key storage)
ENCRYPTION_KEY="generate-with: openssl rand -hex 32"

# AI Gateway (Switchboard)
# OpenAI-compatible router that picks the best model per request. LAN-only, plain HTTP.
# Each user adds their own gateway API key in Settings; this is only the endpoint.
SWITCHBOARD_BASE_URL="http://192.168.2.11:8787/v1"

# MCP server (optional)
# The `search` and `fetch` tools exist only for ChatGPT's deep-research mode.
# Their generic names can muddy tool selection when several connectors are
# attached at once, so set this to 0 on a Claude-only deployment to drop them.
# MCP_CHATGPT_TOOLS="0"