# Copy to /etc/org-backend/org-backend.env (systemd EnvironmentFile)
# Paths must use org-platform/ after Phase 1 reorg — not org_files/

SERVER_PORT=9010
SPRING_PROFILES_ACTIVE=prod
SPRING_DATASOURCE_URL=jdbc:postgresql://127.0.0.1:5432/org_web
SPRING_DATASOURCE_USERNAME=zaine
SPRING_DATASOURCE_PASSWORD=change-me
SPRING_DATASOURCE_DRIVER_CLASS_NAME=org.postgresql.Driver
SPRING_JPA_SHOW_SQL=false

CALIBRE_DB_PATH=/home/zaine/master-folder/projects/calibre/library/metadata.db
JWT_SECRET=change-me-to-a-long-random-secret-at-least-32-characters
JWT_EXPIRATION_MS=86400000

ZONE_BUILD_DIR=/home/zaine/master-folder/org-platform/org_web
ZONE_BUILD_LOG=/home/zaine/master-folder/org-platform/org_web/org-web-build.log
ZONE_MANIFEST_PATH=/home/zaine/master-folder/org-platform/zone/data/manifest.json
ZONE_AUTHORING_URL=http://127.0.0.1:8765
ZONE_WATCHER_UNIT=watcher.service
ZONE_SCRIPTS_LOG_DIR=/home/zaine/logs

EMACS_RUN_DIR=/home/zaine
EMACS_RUN_LOG=/home/zaine/logs/emacs.log
COMBINED_RUN_LOG=/home/zaine/logs/combined.log
ADVENTURE_RESOURCES_FREE_DIR=/home/zaine
ADVENTURE_RESOURCES_FREE_LOG=/home/zaine/logs/adventure-resources.log
ADVENTURE_RESOURCES_FREE_COMMAND="/usr/bin/docker system prune -af"
GUACAMOLE_RUN_DIR=/home/zaine
GUACAMOLE_CONTAINER_NAME=guacamole
GUACAMOLE_START_LOG=/home/zaine/logs/guacamole-start.log
GUACAMOLE_STOP_LOG=/home/zaine/logs/guacamole-stop.log
NOSTALGIA_RUN_DIR=/home/zaine/master-folder/projects/_personal/nostalgia
NOSTALGIA_RUN_LOG=/home/zaine/logs/nostalgia-prod.log

PLAY_RPG_SAVE_DIR=/home/zaine/master-folder/org-platform/org_backend/data/rpg-saves

# Calendar sync
NEXTCLOUD_CALDAV_URL=https://nextcloud.zainezq.com/remote.php/dav/calendars/zaine/
NEXTCLOUD_CALDAV_CALENDARS=personal,zxh
NEXTCLOUD_CALDAV_USERNAME=zaine
NEXTCLOUD_CALDAV_PASSWORD=change-me-to-a-nextcloud-app-password
CALENDAR_TIMEZONE=Europe/London
CALENDAR_SYNC_DAYS_BACK=30
CALENDAR_SYNC_DAYS_FORWARD=365
# Optional: external ICS feed for work calendar
WORK_ICS_URL=

# Leave unset on private zone — timesheet API read/write without credentials
# ORG_BACKEND_API_KEY=
TIMESHEET_AUTH_REQUIRED=false