env.example

# INSTRUCTIONS:
# This is an example configuration file.
# 1. Copy this file to a new file named ".env"
# 2. Update the values with your specific configuration details.

# GitHub OAuth Application Credentials
GITHUB_CLIENT_ID=your_client_id
GITHUB_CLIENT_SECRET=your_client_secret

# Organization and Team for Access Control
GITHUB_ORG=your_org_name
GITHUB_TEAM=your_team_slug

# Web Server Configuration
HOST=127.0.0.1
PORT=3000

# Set to true to enforce HTTPS for redirects and secure cookies
# PRODUCTION=false

# OAuth callback URI. Defaults to {scheme}://{HOST}:{PORT}/ops/oauth-callback
# REDIRECT_URI=https://example.com/ops/oauth-callback

# Session Secret (should be a long random string in production)
SESSION_SECRET=super_secret_session_key_must_be_at_least_64_bytes_long_for_safety

# Application Limits
# Maximum number of pending authentication requests allowed in storage.
MAX_PENDING_REQUESTS=10

# API Access tokens
# Comma-separated list of tokens authorized to call protected API endpoints.
# API_TOKENS=token1,token2,token3

# TLS Configuration (both must be set together, or neither)
# When set, the server serves over HTTPS with automatic hourly certificate reload.
# TLS_CERT=/path/to/cert.pem
# TLS_KEY=/path/to/key.pem

# Redis Configuration (Standalone)
# REDIS_URL=redis://127.0.0.1:6379

# Clock skew tolerance in seconds for time-based validation
# DRIFT_SECS=300