# OpenVibe.Surf — environment (production: /etc/openvibe/surf.env). Names only; never commit values.

NODE_ENV=production
PORT=5110
HOST=127.0.0.1
BASE_URL=https://openvibe.surf
TRUST_PROXY=2

# OpenVibe.Network: sign-in (OAuth client `surf`, PKCE S256) and its JWKS.
OV_NETWORK_INTERNAL_URL=http://127.0.0.1:4000
OV_OAUTH_CLIENT_ID=surf
OV_OAUTH_CLIENT_SECRET=
# The browser is sent to the public origin; the token exchange and the JWKS use the internal one above.
# OV_NETWORK_URL=https://openvibe.network
# OV_NETWORK_ISSUER=https://openvibe.network
# OV_OAUTH_REDIRECT_URI=https://openvibe.surf/auth/callback
# OV_SESSION_AUDIENCE=openvibe.network

# The three rooms this front joins. Internal origins are what this process calls; public origins are what a person's
# browser and the page links use.
OV_LIVE_INTERNAL_URL=http://127.0.0.1:3000
OV_GAMES_INTERNAL_URL=http://127.0.0.1:8000
OV_ACTOR_INTERNAL_URL=http://127.0.0.1:4950
SURF_GAMES_PUBLIC_URL=https://openvibe.games
# SURF_LIVE_PUBLIC_URL=https://openvibe.live
# SURF_ACTOR_PUBLIC_URL=https://openvibe.actor

# Optional: the Watch merge (30 s cache, 2 s per Live source), the Ride cache (60 s) and Games timeout, the Actor
# timeout, the per-IP limit.
# SURF_WATCH_CACHE_MS=30000
# SURF_WATCH_SOURCE_TIMEOUT_MS=2000
# SURF_RIDE_CACHE_MS=60000
# SURF_GAMES_TIMEOUT_MS=4000
# SURF_ACTOR_TIMEOUT_MS=15000
# SURF_RATE_LIMIT_PER_MIN=120
# Watch together: open parties and members per party (these may only be lowered; hard caps 200/50).
# SURF_PARTY_MAX=200
# SURF_PARTY_MEMBER_MAX=50

# optional: defaults to true in production
# COOKIE_SECURE=true