# Contributor environment template. Copy with `just init-env`, then
# fill in FORGE_GITEA_USERNAME. `.env` is gitignored.

# --- Gitea -----------------------------------------------------------
FORGE_GITEA_URL="https://gitea.cvgitea.ddns.net:6006"
FORGE_GITEA_ORG="codevalet"
FORGE_GITEA_USERNAME=""

# --- Orchestrator ----------------------------------------------------
FORGE_ORCHESTRATOR_REPO_URL="https://gitea.cvgitea.ddns.net:6006/codevalet/forge-stack-orchestrator.git"
# Leave empty for the repo's default branch.
FORGE_ORCHESTRATOR_BRANCH=""
# "." clones into ./forge-stack-orchestrator (gitignored by this repo).
FORGE_WORKSPACE_ROOT="."

# --- OAuth2 PKCE CLI app ---------------------------------------------
# Public client id; PKCE requires no secret.
FSDGG_CLI_CLIENT_ID="ba4ec9ec-8ae8-4450-9cec-fd532bbe63d5"
#
# FSDGG_CLI_REDIRECT_URI is NOT the Gitea URL. It is the local loopback
# listener this CLI binds to receive the OAuth2 authorization-code
# callback. RFC 8252 §7.3 (OAuth 2.0 for Native Apps) mandates
# http-scheme loopback: http://127.0.0.1:<port>/<path>,
# http://[::1]:<port>/<path>, or http://localhost:<port>/<path>.
# The value must also match the redirect URI registered in the Gitea
# OAuth app; change it only if the Gitea app registration was updated
# in sync.
FSDGG_CLI_REDIRECT_URI="http://127.0.0.1:38111/callback"

# Set to 1 to skip TLS verification (self-signed dev Gitea only).
# FORGE_INSECURE_TLS="0"