.env.example

# ─── Server ────────────────────────────────────────────
PORT=3000
HOST=0.0.0.0
LOG_LEVEL=info
NODE_ENV=production

# Set to true when running behind a reverse proxy (e.g., nginx)
# TRUST_PROXY=false

# ─── Database ──────────────────────────────────────────
DATABASE_URL=/app/data/cornerstone.db

# ─── Session ───────────────────────────────────────────
SESSION_DURATION=604800
SECURE_COOKIES=true

# ─── OIDC ──────────────────────────────────────────────
# OIDC_ISSUER=https://auth.example.com/realms/main
# OIDC_CLIENT_ID=cornerstone
# OIDC_CLIENT_SECRET=your-client-secret
# OIDC_REDIRECT_URI=https://cornerstone.example.com/api/auth/oidc/callback  # Optional: auto-derived from request if not set

# ─── Paperless-ngx ─────────────────────────────────────
# PAPERLESS_URL=http://paperless-ngx:8000
# PAPERLESS_API_TOKEN=your-paperless-api-token
# PAPERLESS_EXTERNAL_URL=https://paperless.example.com  # Optional: browser-accessible URL for "View in Paperless-ngx" links
# PAPERLESS_FILTER_TAG=cornerstone                      # Optional: only show documents with this Paperless-ngx tag