# Production .env for deploy/docker-compose.traefik.yml (auth + Traefik).
# Copy to /opt/auth-portal/.env and fill secrets. Do not commit.

# --- Traefik / Let's Encrypt (Cloudflare DNS-01) ---
CF_DNS_API_TOKEN=
LETSENCRYPT_EMAIL=admin@shnt.top
AUTH_DOMAIN=auth.shnt.top
# TRAEFIK_IMAGE_TAG=v3.7
# TRAEFIK_HTTP_PORT=80
# TRAEFIK_HTTPS_PORT=443
# TRAEFIK_LOG_LEVEL=INFO

# --- Auth Portal ---
AUTH_IMAGE_TAG=latest
JWT_SECRET=
JWT_TTL_HOURS=1
REFRESH_TTL_DAYS=14
ISSUER=https://auth.shnt.top
ADMIN_EMAIL=admin@shnt.top
ADMIN_PASSWORD=
ADMIN_NAME=Admin
RETURN_TO_ALLOWLIST=.shnt.top,https://vps.shnt.top,https://cfdm.shnt.top
LOG_LEVEL=info
NODE_ENV=production