APP_ENV=development
HTTP_ADDR=:8090
FRONTEND_ORIGIN=http://localhost:5174

MYSQL_DSN=auth:auth_password@tcp(127.0.0.1:3306)/auth_center?charset=utf8mb4&parseTime=true&loc=Local&multiStatements=true
MYSQL_MAX_OPEN_CONNS=50
MYSQL_MAX_IDLE_CONNS=10

REDIS_ADDR=127.0.0.1:6379
REDIS_PASSWORD=
REDIS_DB=0

SESSION_COOKIE_NAME=auth_session
SESSION_TTL=168h
COOKIE_SECURE=false
RATE_LIMIT_ENABLED=false

# Base64 encoded Ed25519 seed (32 bytes) or private key (64 bytes).
# Required in production. Development uses a fixed non-secret test key when empty.
LICENSE_SIGNING_PRIVATE_KEY=
LICENSE_SIGNING_KEY_ID=dev-key-2026-01
# Base64 encoded 32-byte AES key. Required in production.
LICENSE_CODE_ENCRYPTION_KEY=
# Directory containing the immutable, signed release ZIP artifacts.
RELEASE_DIR=releases
# Optional one-time bootstrap account. Set both values, then remove the
# password from the runtime environment after the first administrator exists.
ADMIN_BOOTSTRAP_USERNAME=
ADMIN_BOOTSTRAP_PASSWORD=
INSTANCE_TOKEN_TTL=8760h
LICENSE_LEASE_TTL=60m

# Local development only. Remove this in production.
DEV_LICENSE_CODE=AUTH-DEMO-2026
