# Database Configuration
POSTGRES_USER=admanagement
POSTGRES_PASSWORD=strong_password_here
POSTGRES_DB=admanagement
DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres:5432/${POSTGRES_DB}

# Redis Configuration
REDIS_URL=redis://redis:6379

# Application Configuration
NODE_ENV=production
PORT=5000
SESSION_SECRET=change_this_to_a_random_string
DEBUG=api:*

# JWT Secret for API tokens
JWT_SECRET=change_this_to_a_different_random_string
JWT_EXPIRY=24h

# LDAP Connection Default Settings
LDAP_CONNECT_TIMEOUT=10000
LDAP_IDLE_TIMEOUT=60000
LDAP_RECONNECT_TIMEOUT=10000

# Rate Limiting
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX_REQUESTS=1000

# Logging
LOG_LEVEL=info

# Default Admin User Configuration
DEFAULT_ADMIN_USERNAME=admin
DEFAULT_ADMIN_PASSWORD=password
DEFAULT_ADMIN_EMAIL=admin@example.com
DEFAULT_ADMIN_FULLNAME=System Administrator
DISABLE_REGISTRATION=false

# LDAP Authentication Configuration (Optional)
# LDAP_SERVER=ldap.example.com
# LDAP_PORT=389
# LDAP_USE_TLS=true
# LDAP_BIND_DN=cn=admin,dc=example,dc=com
# LDAP_BIND_PASSWORD=admin_password
# LDAP_SEARCH_BASE=dc=example,dc=com
# LDAP_SEARCH_FILTER=(uid={{username}})

# OpenID Connect Authentication Configuration (Optional)
# OIDC_ISSUER=https://accounts.google.com
# OIDC_AUTHORIZATION_URL=https://accounts.google.com/o/oauth2/v2/auth
# OIDC_TOKEN_URL=https://oauth2.googleapis.com/token
# OIDC_USERINFO_URL=https://openidconnect.googleapis.com/v1/userinfo
# OIDC_CLIENT_ID=your_client_id
# OIDC_CLIENT_SECRET=your_client_secret
# OIDC_CALLBACK_URL=http://localhost:5000/api/auth/oidc/callback