# Copy this file to .env and fill in strong secrets before running.
#   cp .env.example .env
#   openssl rand -hex 32   # use for JWT_SECRET
#   openssl rand -hex 24   # use for each DB password

# PostgreSQL superuser password (used only inside the db container)
POSTGRES_PASSWORD=change-me-postgres-superuser

# Password of the restricted application role (sbc_app) the API connects with
APP_DB_PASSWORD=change-me-app-db-password

# Secret used to sign session tokens (JWT). MUST be long and random.
JWT_SECRET=change-me-64-hex-chars-min

# Initial password of the admin account (admin@sluc-businessclub.fr).
# Applied/updated at API startup. Change it after first login.
ADMIN_INITIAL_PASSWORD=ChangeMe-Admin-2026!

# Initial password given to every seeded member account (demo data only)
MEMBER_INITIAL_PASSWORD=ChangeMe-Membre-2026!

# Set to "true" when serving over HTTPS (adds Secure flag on cookies)
COOKIE_SECURE=false

# Public port of the web frontend
WEB_PORT=8080