# ACC Server Manager Environment Configuration
# Copy this file to .env and update with your actual values

# =============================================================================
# CRITICAL SECURITY SETTINGS (REQUIRED)
# =============================================================================

# JWT Secret Key - MUST be changed in production
# Generate with: openssl rand -base64 64
JWT_SECRET=your-super-secure-jwt-secret-key-minimum-32-chars-long-change-this-in-production

# Application Secrets - MUST be changed in production
# Generate with: openssl rand -hex 32
APP_SECRET=your-super-secure-app-secret-change-this-in-production
APP_SECRET_CODE=your-super-secure-app-secret-code-change-this-in-production

# Encryption Key for sensitive data (MUST be exactly 32 characters for AES-256)
# Generate with: openssl rand -hex 16
ENCRYPTION_KEY=your-32-character-encryption-key

# =============================================================================
# CORE APPLICATION SETTINGS
# =============================================================================

# Database file name (SQLite)
DB_NAME=acc.db

# Server port
PORT=3000

# CORS allowed origin (use specific domains in production)
CORS_ALLOWED_ORIGIN=http://localhost:5173

# Default admin password for initial setup (change after first login)
PASSWORD=change-this-default-admin-password

# =============================================================================
# INSTRUCTIONS FOR PRODUCTION DEPLOYMENT
# =============================================================================

# 1. Generate secure secrets:
#    - JWT_SECRET: openssl rand -base64 64
#    - APP_SECRET: openssl rand -hex 32
#    - APP_SECRET_CODE: openssl rand -hex 32
#    - ENCRYPTION_KEY: openssl rand -hex 16

# 2. Set appropriate CORS origins for your domain

# 3. Change the default PASSWORD immediately after first login

# 4. NEVER commit actual secrets to version control!

# =============================================================================
# PLATFORM SELECTION
# =============================================================================

# Platform mode: "windows" (default) or "docker"
# PLATFORM=windows

# =============================================================================
# DOCKER MODE SETTINGS (required when PLATFORM=docker)
# =============================================================================

# Docker image name for ACC server containers (built from docker/acc-server/Dockerfile)
# ACC_IMAGE=acc-wine:latest

# Base path where per-server game installations are stored.
# Each server gets its own subdirectory: ACC_SERVERS_PATH/<service-name>/
# ACC_SERVERS_PATH=/data/servers

# Port pool for Docker-mode ACC server containers (one port per server).
# PORT_POOL_MIN=9600
# PORT_POOL_MAX=9700

# Linux SteamCMD binary path (pre-installed in the manager Docker image).
# STEAMCMD_LINUX_PATH=/usr/games/steamcmd

# =============================================================================
# OPTIONAL SETTINGS (These are handled by system config in database)
# =============================================================================

# The following settings are managed through the application's system config
# and stored in the database. They are listed here for reference only:
#
# - SteamCMD path (configured via web interface)
# - NSSM path (configured via web interface)
# - Logging settings (handled by application defaults)
# - Rate limiting (handled by application defaults)
# - Backup settings (handled by application defaults)
# - Monitoring settings (handled by application defaults)
#
# These can be configured through the web interface after installation.