OPENROUTER_API_KEY=

# --- Auth (all providers are optional; configure only what you need) ---

# Authentik (genericOAuth)
AUTH_AUTHENTIK_CLIENT_ID=
AUTH_AUTHENTIK_CLIENT_SECRET=
AUTH_AUTHENTIK_ISSUER=

# Google OAuth — https://console.cloud.google.com/
AUTH_GOOGLE_CLIENT_ID=
AUTH_GOOGLE_CLIENT_SECRET=

# Apple Sign In — https://developer.apple.com/account/resources/authkeys/list
# AUTH_APPLE_CLIENT_SECRET is a pre-generated JWT signed with the .p8 key.
# See: https://better-auth.com/docs/authentication/apple
AUTH_APPLE_CLIENT_ID=
AUTH_APPLE_CLIENT_SECRET=
AUTH_APPLE_TEAM_ID=
AUTH_APPLE_KEY_ID=
AUTH_APPLE_PRIVATE_KEY=

BETTER_AUTH_URL=
BETTER_AUTH_SECRET=
DATABASE_URL=