# Development fallback: local nickname login
AUTH_MODE=local

# Pocket ID / OIDC login
# AUTH_MODE=oidc
# OIDC_ISSUER=https://id.example.com
# OIDC_CLIENT_ID=your-client-id
# OIDC_CLIENT_SECRET=your-client-secret
# OIDC_REDIRECT_URL=http://localhost:8080/auth/callback
# OIDC_SCOPES=openid profile email

# Generate with: openssl rand -base64 32
SESSION_SECRET=replace-with-a-random-32-byte-secret