# Server Configuration
SERVER_HOST=0.0.0.0
SERVER_PORT=8083

# Authentication
JWT_SECRET=change-me-in-production-use-a-long-random-string
TOKEN_EXPIRY_HOURS=24
REFRESH_TOKEN_EXPIRY_HOURS=168

# CORS
CORS_ENABLED=true
# CORS_ORIGINS=https://app.example.com,https://admin.example.com

# Provisioning
PROVISIONING_CLI_PATH=/usr/local/bin/provisioning
# DEFAULT_WORKSPACE=production
OPERATION_TIMEOUT=300
MAX_CONCURRENT_OPERATIONS=10

# Logging
LOG_LEVEL=info
LOG_JSON=false
# AUDIT_LOG_PATH=/var/log/provisioning-server/audit.log

# TLS (optional)
# TLS_CERT=/path/to/cert.pem
# TLS_KEY=/path/to/key.pem

# mTLS (optional)
# MTLS_ENABLED=false
# MTLS_CA_CERT=/path/to/ca.pem