# NextAuth
AUTH_SECRET="your-auth-secret-generate-with-openssl-rand-base64-32"
AUTH_TRUST_HOST=true
AUTH_URL="https://my.gosec.cloud"

# Keycloak OIDC
AUTH_KEYCLOAK_ID="gsc-my"
AUTH_KEYCLOAK_SECRET="your-keycloak-client-secret"
AUTH_KEYCLOAK_ISSUER="https://auth.gosec.cloud/realms/gosecCloud"

# Default tenant (optional)
DEFAULT_TENANT_ID="a0000000-0000-0000-0000-000000000003"

# Set to "true" to bypass authentication (for development)
SKIP_AUTH="false"

# Bicameral Chat API
BICAMERAL_API_URL="https://bicameral.gosec.cloud/api/v1"
NEXT_PUBLIC_BICAMERAL_WS_URL="wss://bicameral.gosec.cloud/ws"

# Ops API (personal agent config)
OPS_API_URL="https://172.17.8.20:8443"
OPS_API_KEY="your-ops-api-key"