# GitHub OAuth # Create OAuth App at: https://github.com/settings/developers # Callback URL: http://localhost:8080/auth/github/callback GITHUB_CLIENT_ID=your_github_oauth_client_id_here GITHUB_CLIENT_SECRET=your_github_oauth_client_secret_here # Session Security # Generate with: openssl rand -base64 32 SESSION_SECRET=generate-a-random-32-character-string-here # Database DATABASE_PATH=./data/markedit.db # Git Cache GIT_CACHE_DIR=./data/repos # CORS (comma-separated allowed origins) CORS_ALLOWED_ORIGINS=http://localhost:4321,http://localhost:3000 # Server PORT=8080 # Production Notes: # For production deployment: # - Create separate GitHub OAuth app with production URLs # - Use HTTPS callback URL: https://yourdomain.com/auth/github/callback # - Generate strong SESSION_SECRET (32+ characters) # - Update CORS_ALLOWED_ORIGINS to your production domain # - Consider using environment-specific .env files