DATABASE_URL=postgresql://minecraft:minecraft@localhost:5432/minecraft_accounts
APP_URL=http://localhost:3000
SESSION_SECRET=

# Admin OIDC / Keycloak
NEXTAUTH_URL=http://localhost:3000
AUTH_SECRET=
KEYCLOAK_ISSUER_URL=
KEYCLOAK_CLIENT_ID=minecraft-account-manager-admin
KEYCLOAK_CLIENT_SECRET=
KEYCLOAK_REQUIRED_ROLE=minecraft-account-manager-admin

# Discord
DISCORD_BOT_TOKEN=
DISCORD_APPLICATION_ID=
DISCORD_GUILD_ID=
DISCORD_INVITE_URL=https://discord.gg/your-invite

# Trust forwarding headers only when your reverse proxy overwrites them
TRUST_PROXY=false

# ProxyCheck.io geolocation and VPN/proxy detection
IP_INTELLIGENCE_PROVIDER=proxycheck
PROXYCHECK_API_KEY=
IP_INTELLIGENCE_CACHE_HOURS=48
BLOCK_HOSTING_IPS=false

# Structured Pino logging
LOG_LEVEL=info