.env.example

# Copy this file to .env and fill in real values before starting the server.

# Required. A long random string used to sign login cookies.
# Generate one with: openssl rand -hex 32
JWT_SECRET=

PORT=3000

# --- Discord OAuth ---
# Create an app at https://discord.com/developers/applications
# -> OAuth2 -> add a redirect matching DISCORD_CALLBACK_URL below
DISCORD_CLIENT_ID=
DISCORD_CLIENT_SECRET=
DISCORD_CALLBACK_URL=https://your-domain.example.com/auth/discord/callback

# --- GitHub OAuth ---
# Create an app at https://github.com/settings/developers -> New OAuth App
# -> Authorization callback URL must match GITHUB_CALLBACK_URL below
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
GITHUB_CALLBACK_URL=https://your-domain.example.com/auth/github/callback

# Leave a provider's ID/SECRET blank to disable it - the login screen still
# shows both buttons, but an unconfigured provider will fail on click.