# GitHub
GITHUB_WEBHOOK_SECRET=your-webhook-secret
GITHUB_APP_ID=your-app-id
GITHUB_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----"
GITHUB_CLIENT_ID=your-client-id
GITHUB_CLIENT_SECRET=your-client-secret

# Gitea (optional — to receive Gitea webhooks)
GITEA_WEBHOOK_SECRET=your-gitea-webhook-secret

# Discord
DISCORD_TOKEN=your-bot-token
DISCORD_PUBLIC_KEY=your-public-key
DISCORD_APPLICATION_ID=your-application-id

# Telegram
TELEGRAM_TOKEN=your-bot-token
TELEGRAM_WEBHOOK_SECRET=your-webhook-secret
# TELEGRAM_RICH_HEADER_HOST=https://your-domain

# Admin
ADMIN_USER_IDS=your-github-id,your-github-login
# ALLOW_SELF_SIGNUP=1          # non-admin GitHub users get a personal group on first login (default off)
# AUDIT_RETENTION_DAYS=90      # audit log retention for the scheduled cleanup (default 90)

# Server / public URL (OAuth callbacks + Telegram webhook sync)
BASE_URL=http://localhost:8787

# Optional (public runtime config, consumed by the Nuxt pages)
# NUXT_PUBLIC_DOCS_URL=https://your-docs-site
# NUXT_PUBLIC_REPO_URL=https://github.com/ReCloudStudio/WebHooker
# NUXT_PUBLIC_LEGAL_CONTACT=contact@example.com