.env.example

# Copy this file to .env and fill in real values before starting the server.

# Required. A long random string used to sign login cookies.
# Generate one with: openssl rand -hex 32
JWT_SECRET=

PORT=3000

# Comma-separated user ids (provider:providerId, e.g. github:37058311,
# discord:123456789012345678) that are always treated as owning every role
# (admin + event_coordinator), regardless of what's stored in the DB. This
# is the only way to reach any admin route (the balance-tuning dashboard,
# roles management, the user list) - there's no other way to bootstrap the
# first admin, so set this to your own id or nobody, including you, will
# have admin access. Log in once first if you don't know your id yet.
# Leave blank to disable admin access entirely.
SUPER_ADMIN_IDS=

# --- Discord OAuth ---
# Create an app at https://discord.com/developers/applications
# -> OAuth2 -> add a redirect matching DISCORD_CALLBACK_URL below
DISCORD_CLIENT_ID=
DISCORD_CLIENT_SECRET=
DISCORD_CALLBACK_URL=https://your-domain.example.com/auth/discord/callback

# --- GitHub OAuth ---
# Create an app at https://github.com/settings/developers -> New OAuth App
# -> Authorization callback URL must match GITHUB_CALLBACK_URL below
GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
GITHUB_CALLBACK_URL=https://your-domain.example.com/auth/github/callback

# Leave a provider's ID/SECRET blank to disable it - the login screen still
# shows both buttons, but an unconfigured provider will fail on click.