# Server Configuration
API_PORT=8080
ENVIRONMENT=production  # IMPORTANT: Set to 'production' in production!

# Security - REQUIRED
API_KEY=CHANGE-THIS-USE-32-CHARS-MINIMUM!!

# CORS Configuration
CORS_ALLOWED_ORIGINS=http://localhost:3000

# Vaultwarden Configuration - REQUIRED
# URL of your Vaultwarden instance (no trailing slash)
VAULTWARDEN_URL=https://vault.yourdomain.com

# Authentication Method 1: API Keys (RECOMMENDED - doesn't expire)
VAULTWARDEN_CLIENT_ID=user.xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
VAULTWARDEN_CLIENT_SECRET=your-long-client-secret-here

# Authentication Method 2: Session Token (LEGACY - expires after some time)
# VAULTWARDEN_ACCESS_TOKEN=your-session-token-here

# Performance & Caching
# How long to cache secrets in memory (reduces API calls)
# Set to 0 to disable caching (more secure but slower)
CACHE_TTL=5m

# Timeouts
READ_TIMEOUT=10s
WRITE_TIMEOUT=10s