# GoChat Environment Variables
# Copy to .env and fill in your values. NEVER commit .env to git.

# ---- Application ----
GOCHAT_ENV=prod
# Keep disabled in production. Enable only for controlled QA/UAT environments.
GOCHAT_ALLOW_FAKE_CHANNEL=false

# ---- Server ----
GOCHAT_SERVER_HOST=0.0.0.0
GOCHAT_SERVER_PORT=3000
GOCHAT_SERVER_MODE=release  # debug, release, test

# ---- Database ----
GOCHAT_DATABASE_HOST=localhost
GOCHAT_DATABASE_PORT=5432
GOCHAT_DATABASE_USER=gochat
GOCHAT_DATABASE_PASSWORD=CHANGE_ME_TO_A_STRONG_PASSWORD
GOCHAT_DATABASE_DBNAME=gochat_production
GOCHAT_DATABASE_SSLMODE=disable
GOCHAT_DATABASE_MAX_IDLE_CONNS=10
GOCHAT_DATABASE_MAX_OPEN_CONNS=100
GOCHAT_DATABASE_CONN_MAX_LIFETIME=3600

# ---- Redis ----
GOCHAT_REDIS_URL=redis://localhost:6379
GOCHAT_REDIS_POOL_SIZE=50

# ---- JWT ----
GOCHAT_JWT_SECRET=CHANGE_ME_TO_A_RANDOM_64_CHAR_STRING
GOCHAT_JWT_EXPIRY_HOURS=72
GOCHAT_JWT_ACCESS_EXPIRY_MINUTES=15
GOCHAT_JWT_REFRESH_EXPIRY_HOURS=168

# ---- Logging ----
GOCHAT_LOG_LEVEL=info  # debug, info, warn, error
GOCHAT_LOG_FORMAT=json  # json, text

# ---- SMTP / Email ----
SMTP_ADDRESS=smtp.example.com
SMTP_PORT=587
SMTP_USERNAME=your-email@example.com
SMTP_PASSWORD=your-email-password

# ---- Worker ----
GOCHAT_WORKER_CONCURRENCY=10

# ---- Frontend URL ----
FRONTEND_URL=https://your-domain.com

# ---- Search ----
GOCHAT_SEARCH_ENGINE=meilisearch
GOCHAT_SEARCH_HOST=http://localhost:7700
GOCHAT_SEARCH_API_KEY=
GOCHAT_SEARCH_INDEX_PREFIX=gochat_
GOCHAT_SEARCH_TIMEOUT_SECONDS=5

# ---- Storage ----
GOCHAT_STORAGE_PROVIDER=local
GOCHAT_STORAGE_LOCAL_PATH=./uploads
GOCHAT_STORAGE_MAX_FILE_SIZE=20971520  # 20MB

# ---- SAML (Enterprise SSO, disabled by default) ----
GOCHAT_SAML_ENABLED=false
GOCHAT_SAML_IDP_METADATA_URL=
GOCHAT_SAML_SP_ENTITY_ID=gochat
GOCHAT_SAML_SP_ACS_URL=https://your-domain.com/api/v1/auth/saml/acs

# ---- LDAP (Enterprise Authentication, disabled by default) ----
GOCHAT_LDAP_ENABLED=false
GOCHAT_LDAP_DEFAULT_HOST=ldap.example.com
GOCHAT_LDAP_DEFAULT_PORT=389
GOCHAT_LDAP_DEFAULT_USE_TLS=false
GOCHAT_LDAP_DEFAULT_BASE_DN=dc=example,dc=com
GOCHAT_LDAP_DEFAULT_BIND_DN=cn=admin,dc=example,dc=com
GOCHAT_LDAP_DEFAULT_BIND_PASSWORD=CHANGE_ME
GOCHAT_LDAP_DEFAULT_USER_FILTER=(objectClass=person)
GOCHAT_LDAP_DEFAULT_EMAIL_ATTRIBUTE=mail
GOCHAT_LDAP_DEFAULT_NAME_ATTRIBUTE=cn
GOCHAT_LDAP_DEFAULT_GROUP_ATTRIBUTE=memberOf
GOCHAT_LDAP_SYNC_INTERVAL=3600

# ---- OIDC (Enterprise OAuth/OIDC SSO, disabled by default) ----
GOCHAT_OIDC_ENABLED=false
GOCHAT_OIDC_DEFAULT_CLIENT_ID=
GOCHAT_OIDC_DEFAULT_CLIENT_SECRET=
GOCHAT_OIDC_DEFAULT_REDIRECT_URL=https://your-domain.com/api/v1/oidc/callback
GOCHAT_OIDC_DEFAULT_ISSUER_URL=https://accounts.google.com
GOCHAT_OIDC_DEFAULT_AUTHORIZATION_URL=
GOCHAT_OIDC_DEFAULT_TOKEN_URL=
GOCHAT_OIDC_DEFAULT_USER_INFO_URL=
GOCHAT_OIDC_DEFAULT_JWKS_URL=
GOCHAT_OIDC_DEFAULT_SCOPES=openid,profile,email