# ─────────────────────────────────────────────────────────────────────────────
# Enterprise Digital Platform — Environment Variables
# Copy to .env and fill in the values before running docker-compose up
# ─────────────────────────────────────────────────────────────────────────────

# ── Shared secrets (MUST be changed in production) ───────────────────────────
# This secret signs the platform-wide JWT token for SSO.
# All services must share the same value.
PORTAL_JWT_SECRET=change-this-to-a-random-256-bit-secret

# ── Portal service ────────────────────────────────────────────────────────────
PORTAL_SECRET_KEY=change-this-portal-flask-secret

# Initial admin account created on first startup
ADMIN_USERNAME=admin
ADMIN_PASSWORD=admin123
ADMIN_EMAIL=admin@yourdomain.com

# ── DigiServer v2 ─────────────────────────────────────────────────────────────
DIGISERVER_SECRET_KEY=change-digiserver-flask-secret

# ── IT Asset Management ───────────────────────────────────────────────────────
ITASSETS_SECRET_KEY=change-itassets-flask-secret

# Optional: override SQLite with MySQL for IT Assets
# SQLALCHEMY_DATABASE_URI=mysql+pymysql://user:pass@host:3306/itassets?charset=utf8mb4

# ── Domain (used for HTTPS / cookies in production) ──────────────────────────
DOMAIN=localhost