DATABASE_URL=postgresql://minecraft:minecraft@localhost:5432/minecraft_accounts
APP_URL=http://localhost:3000
SESSION_SECRET=

# Admin OIDC / Keycloak
NEXTAUTH_URL=http://localhost:3000
AUTH_SECRET=
KEYCLOAK_ISSUER_URL=
KEYCLOAK_CLIENT_ID=minecraft-account-manager-admin
KEYCLOAK_CLIENT_SECRET=
KEYCLOAK_REQUIRED_ROLE=minecraft-account-manager-admin

# Discord
DISCORD_BOT_TOKEN=
DISCORD_APPLICATION_ID=
DISCORD_GUILD_ID=
DISCORD_INVITE_URL=https://discord.gg/your-invite

# Trust forwarding headers only when your reverse proxy overwrites them
TRUST_PROXY=false

# Optional VPN intelligence provider (deferred for v1)
IP_INTELLIGENCE_PROVIDER=none
IP_INTELLIGENCE_API_KEY=