.env.example

# Cross-app URLs — used by navbar links
# In production, these default to subdomains (see packages/ui/src/lib/app-links.ts)
# Override here for local development
PUBLIC_WEBSITE_URL=http://localhost:4323
PUBLIC_DOCS_URL=http://localhost:4321
PUBLIC_BLOG_URL=http://localhost:4322

# Optional: GitHub token for higher API rate limits (contributors fetch)
# GITHUB_TOKEN=ghp_xxxxxxxxxxxx

# --- Optional OIDC authentication for protected docs pages ---
# Leave PUBLIC_AUTH_ENABLED unset (or not "true") to keep the docs 100% public/static.
# PUBLIC_AUTH_ENABLED=true
# PUBLIC_OIDC_ISSUER=https://keycloak.example.com/realms/my-realm
# PUBLIC_OIDC_CLIENT_ID=docs
# Defaults derived from the site origin if omitted:
# PUBLIC_OIDC_REDIRECT_URI=https://docs.example.com/auth/callback
# PUBLIC_OIDC_POST_LOGOUT_REDIRECT_URI=https://docs.example.com/
# PUBLIC_OIDC_SILENT_REDIRECT_URI=https://docs.example.com/auth/silent
# PUBLIC_OIDC_SCOPE=openid profile email
# Dot-path to the roles claim. Realm roles: realm_access.roles
# Client roles (Keycloak & FerrisKey): resource_access.<client-id>.roles
# PUBLIC_OIDC_ROLES_CLAIM=realm_access.roles
# PUBLIC_OIDC_AUDIENCE=docs-api
# RP-initiated logout endpoint. Only needed when the IdP omits end_session_endpoint
# from its discovery doc (e.g. FerrisKey). Defaults to {issuer}/protocol/openid-connect/logout
# PUBLIC_OIDC_END_SESSION_ENDPOINT=https://keycloak.example.com/realms/my-realm/protocol/openid-connect/logout