Initial Commit

.env.example

@@ -0,0 +1,31 @@
+# Contributor environment template. Copy with `just init-env`, then
+# fill in FORGE_GITEA_USERNAME. `.env` is gitignored.
+
+# --- Gitea -----------------------------------------------------------
+FORGE_GITEA_URL="https://gitea.cvgitea.ddns.net:6006"
+FORGE_GITEA_ORG="codevalet"
+FORGE_GITEA_USERNAME=""
+
+# --- Orchestrator ----------------------------------------------------
+FORGE_ORCHESTRATOR_REPO_URL="https://gitea.cvgitea.ddns.net:6006/codevalet/forge-stack-orchestrator.git"
+# Leave empty for the repo's default branch.
+FORGE_ORCHESTRATOR_BRANCH=""
+# "." clones into ./forge-stack-orchestrator (gitignored by this repo).
+FORGE_WORKSPACE_ROOT="."
+
+# --- OAuth2 PKCE CLI app ---------------------------------------------
+# Public client id; PKCE requires no secret.
+FSDGG_CLI_CLIENT_ID="ba4ec9ec-8ae8-4450-9cec-fd532bbe63d5"
+#
+# FSDGG_CLI_REDIRECT_URI is NOT the Gitea URL. It is the local loopback
+# listener this CLI binds to receive the OAuth2 authorization-code
+# callback. RFC 8252 §7.3 (OAuth 2.0 for Native Apps) mandates
+# http-scheme loopback: http://127.0.0.1:<port>/<path>,
+# http://[::1]:<port>/<path>, or http://localhost:<port>/<path>.
+# The value must also match the redirect URI registered in the Gitea
+# OAuth app; change it only if your Gitea app registration was updated
+# in sync.
+FSDGG_CLI_REDIRECT_URI="http://127.0.0.1:38111/callback"
+
+# Set to 1 to skip TLS verification (self-signed dev Gitea only).
+# FORGE_INSECURE_TLS="0"