### LaSuite Meet configuration
# This is an incomplete list of configuration variables containing those you
# might usually want to set for a deployment. For the full list,
# see the documentation at
# <https://documentation-meet.beta.numerique.gouv.fr/reference/env-variables/>.

## Base application settings
#
# The Django application configuration. One of ‘Development’, ‘Test’,
# ‘ContinuousIntegration’, ‘Production’.
DJANGO_CONFIGURATION=Production
# Comma-separated list of hosts (DNS names or IP addresses) to allow to
# connect to the server.
DJANGO_ALLOWED_HOSTS=localhost
# The Django secret application key used for cryptographic signing. Can be
# either set inline (via DJANGO_SECRET_KEY) or loaded from another file
# (via DJANGO_SECRET_KEY_FILE). Must be set to a 50+ character random string
# before running the application.
#  The secret key can be generated by running this command.
#
#     python3 -c 'import secrets; print(secrets.token_hex())'
#
#  If DJANGO_SECRET_KEY_FILE is a relative path, it is interpreted relative to
# the working directory (using the supplied systemd service, by default,
# /var/lib/lasuite-meet).
#DJANGO_SECRET_KEY=
DJANGO_SECRET_KEY_FILE=SecretKey
# The socket to bind the HTTP server to. Will be passed to
# gunicorn’s --bind option. The default is ‘unix:/run/lasuite-meet/http.sock’.
#HTTP_BIND=unix:/run/lasuite-meet/http.sock
#HTTP_BIND=127.0.0.1:8000
# How many worker processes to spawn. The default is 1.
#WEB_CONCURRENCY=1

## PostgreSQL database settings
#
DB_HOST=/run/postgresql
#DB_PORT=5432
DB_NAME=lasuite-meet
DB_USER=lasuite-meet
#DB_PASSWORD=

## Redis database settings
REDIS_URL=redis://localhost:6379/0

## Celery settings
#
# Whether to enable the Celery task queue. Currently used for asynchronously
# cleaning up uploaded files (FILE_UPLOAD_ENABLED). When this is enabled, also
# start the Celery broker service. The default is ‘False’.
#CELERY_ENABLED=False
# The Redis database URL to use for Celery.
CELERY_BROKER_URL=redis://localhost:6379/1

## LiveKit settings
# LaSuite Meet uses the LiveKit WebRTC stack for audio/video
# streaming.
#
# The public URL to the LiveKit API endpoint.
#LIVEKIT_API_URL=https://livekit.knifepoint.net/
# The LiveKit API application key.
#LIVEKIT_API_KEY=lasuite-meet
# The secret belonging to the application key.
#LIVEKIT_API_SECRET=

## Authentication settings
# LaSuite Meet uses OpenID Connect as its authentication backend.
#
#OIDC_RP_CLIENT_ID=lasuite-meet
#OIDC_RP_CLIENT_SECRET=
# The OpenID scopes to request from the identity provider.
# The default is ‘openid email’.
OIDC_RP_SCOPES=openid email profile
# The OIDC token signing algorithm. The default is ‘RS256’.
OIDC_RP_SIGN_ALGO=ES256
#OIDC_OP_AUTHORIZATION_ENDPOINT=
#OIDC_OP_JWKS_ENDPOINT=
#OIDC_OP_TOKEN_ENDPOINT=
#OIDC_OP_USER_ENDPOINT=
OIDC_REDIRECT_REQUIRE_HTTPS=True
# Whether to use PKCE. Some identity providers such as Kanidm will not allow
# requests without PKCE for security reasons. The default is ‘False’.
OIDC_USE_PKCE=True
#OIDC_CREATE_USER=True
#LOGIN_REDIRECT_URL=
#LOGIN_REDIRECT_URL_FAILURE=
# Whether to allow unauthenticated room creation. By default, it is possible
# for unauthenticated users to create rooms by making up a free meeting ID.
# It is therefore advised to set this to ‘False’ when authentication is
# desired. The default is ‘True’.
#ALLOW_UNREGISTERED_ROOMS=True