# Development configuration for deploy/compose.yml + compose.dev.yml.
# Copy to deploy/.env and adjust.
#
#   cp deploy/.env.example deploy/.env
#
# Requires ../../../Infrastructure running first (Postgres, Zitadel,
# SeaweedFS). See ../../../Infrastructure/README.md. Ping has its own
# credentials on each shared service (role, S3 identity, Zitadel service
# account), provisioned by Infrastructure. Every value marked
# "= Infrastructure's PING_*" below has to be the same as that setting in
# Infrastructure's .env.

DOTNET_ENVIRONMENT=Development

# --- Public URLs -------------------------------------------------------------
PUBLIC_WEB_URL=http://localhost:3100
PUBLIC_API_URL=http://localhost:5211
PUBLIC_AUTH_URL=http://host.docker.internal:8080

# --- PostgreSQL (Infrastructure's shared instance, Ping's own database) -----
# Ping's own role, owner of ping_db only.
POSTGRES_HOST=host.docker.internal
POSTGRES_USER=ping
# = Infrastructure's PING_DB_PASSWORD
POSTGRES_PASSWORD=ping
POSTGRES_DB=ping_db

# --- Zitadel (OIDC, shared instance) -----------------------------------------
# Folder with Ping's own Zitadel PAT (a service account that owns the Ping
# project only), written by Infrastructure's `provision`. Adjust if your
# Infrastructure checkout lives somewhere else relative to this one.
ZITADEL_PAT_DIR=../../../Infrastructure/zitadel/.output/ping
ZITADEL_DEV_MODE=true

# OIDC clients: the zitadel-init one-shot service (see compose.yml) fills these in
# automatically on `docker compose up -d`.
AUTH_CLIENT_ID=
WEB_CLIENT_ID=

# --- SeaweedFS (S3, shared instance, Ping's own bucket) ----------------------
# Ping's own identity, limited to S3_BUCKET.
# = Infrastructure's PING_S3_ACCESS_KEY / PING_S3_SECRET_KEY
S3_ACCESS_KEY=ping_access_key
S3_SECRET_KEY=ping_secret_key
S3_BUCKET=ping-storage
S3_PUBLIC_URL=http://host.docker.internal:8333
S3_USE_HTTP=true

# --- LiveKit (voice/video SFU) ------------------------------------------------
# --dev mode uses this fixed dev key pair; fine for local development only.
LIVEKIT_API_KEY=devkey
LIVEKIT_API_SECRET=9U1eDtZx9eQrSWern4UcWa3lYIrfvrQqExLlkUXpP+o=

# --- Misc --------------------------------------------------------------------
AUTH_REQUIRE_HTTPS=false