# Copy to .env next to docker-compose.yml and fill in. Never commit .env.

PORT=3100

# Google sign-in — the OAuth "Web application" client ID from Google Cloud Console.
# See README.md › "Set up Google sign-in". Leave empty to disable Google sign-in.
GOOGLE_CLIENT_ID=

# Only Google accounts on these domains can sign in (comma-separated). These are the
# church's Google Workspace domains (campuses, media, academy and ELC included).
ALLOWED_DOMAINS=waterschurch.org,waters.church,watersmedia.org,timhatchlive.com,waterschurchnorwood.org,watersacademy.org,waterselc.com

# These people are always admins (comma-separated). The very first person to sign in
# also becomes an admin.
ADMIN_EMAILS=you@waterschurch.org

# Optional break-glass password for the ADMIN_EMAILS accounts, for when Google sign-in
# is not set up yet or is broken. Use something long. Leave empty to disable.
ADMIN_PASSWORD=

# Name of the first workspace created on an empty database.
ORG_NAME=Waters Church

# Local development only: passwordless sign-in for any allowed-domain email.
# Ignored when NODE_ENV=production (which the Docker image sets).
# DEV_LOGIN=1