# Copy to .env next to docker-compose.yml and fill in. Never commit .env.

PORT=3100

# Google sign-in — the OAuth "Web application" client ID from Google Cloud Console.
# See README.md › "Set up Google sign-in". Leave empty to disable Google sign-in.
GOOGLE_CLIENT_ID=

# Only Google accounts on these domains can sign in (comma-separated). Both church
# domains are Google Workspace domains, so both are allowed by default.
ALLOWED_DOMAINS=waterschurch.org,waters.church

# These people are always admins (comma-separated). The very first person to sign in
# also becomes an admin.
ADMIN_EMAILS=you@waterschurch.org

# Optional break-glass password for the ADMIN_EMAILS accounts, for when Google sign-in
# is not set up yet or is broken. Use something long. Leave empty to disable.
ADMIN_PASSWORD=

# Name of the first workspace created on an empty database.
ORG_NAME=Waters Church

# Local development only: passwordless sign-in for any allowed-domain email.
# Ignored when NODE_ENV=production (which the Docker image sets).
# DEV_LOGIN=1