# docv-back configuration. Copy to .env and set values.
# Database (docv BDD)
DATABASE_URL=postgres://user:password@localhost:5432/docv

# Auth
JWT_SECRET=your-secret-min-32-chars
# Durée (secondes) pour : jeton Bearer OAuth, JWT du cookie docv_oauth_session, Max-Age du cookie après POST /oauth/sign-in. Défaut 900 (15 min). Plage 60–86400.
# DOCV_OAUTH_ACCESS_TOKEN_TTL_SEC=900
# Emails séparés par des virgules : au démarrage, rattachement au premier office (ancienneté) comme rôle client si l’utilisateur n’a aucune société. Laisser vide pour désactiver.
# DOCV_DEMO_MEMBER_EMAILS=client@example.com
# Test uniquement : rattacher tous les utilisateurs sans office_members au plus ancien office (évite GET /api/v1/offices vide). Voir docs/docv/AUTH_SESSION.md
# DOCV_LINK_ORPHAN_USERS_TO_FIRST_OFFICE=1

# OAuth2 (authorization_code) — comma-separated client ids if several apps share this secret
OAUTH_CLIENT_ID=enso-web
OAUTH_CLIENT_SECRET=change-me
OAUTH_REDIRECT_URIS=https://localhost:3032/auth/docv-callback
# Prefix browsers use before /oauth/... (reverse proxy, e.g. /docv-api). Empty only if OAuth is at site root.
OAUTH_BROWSER_PATH_PREFIX=/docv-api
# Primary key column on table users: `id` (shipped migration) or `uid` (legacy / IMPL-style schema).
# DOCV_USERS_PK_COLUMN=uid

# Optional: branding for HTML sign-in (defaults to tenants.default.json in repo)
# OAUTH_TENANTS_PATH=/path/to/tenants.json
# OAUTH_TENANTS_JSON={"default":{"heading":"Connexion"},"clients":{}}

# External APIs (backend only): anchoring (services), IA (submodule ai)
ANCHORING_URL=http://localhost:3016
IA_API_URL=http://localhost:3022

# Server (aligned with nginx proxy → docv-back and /docv-api/; see docs/PORTS_ENSO.md)
HOST=0.0.0.0
PORT=3038

# Optional: directory for binary document uploads (POST /api/v1/folders/:uid/documents/binary).
# When unset, the front falls back to JSON-only metadata (no downloadable file).
# DOCV_FILE_STORAGE_DIR=/var/lib/docv/uploads
# Max body size for binary upload in bytes (default 10485760).
# DOCV_UPLOAD_MAX_BYTES=10485760

# Optional: mirror uploads under data/dossiers-permanents/ and git commit/push (see docs/features/DOSSIERS_PERMANENTS_DATA_GIT.md).
# DOCV_DP_GIT_SYNC=1
# DOCV_DP_GIT_REPO_ROOT=/path/to/enso
# DOCV_DP_GIT_DATA_SUBPATH=data/dossiers-permanents
# DOCV_DP_GIT_REMOTE=origin
# DOCV_DP_GIT_BRANCH=test