# Copy to .env and fill in. .env is gitignored and must never be committed.
# Real values live in ~/.config/svcforge/secrets.env (chmod 600).

# Postgres — transaction pooler (6543). Runtime traffic.
SVCFORGE_PG_DSN=postgresql://postgres.<project>:<password>@aws-1-ap-southeast-1.pooler.supabase.com:6543/postgres
# Postgres — session pooler (5432). Migrations and psql only.
SVCFORGE_PG_DSN_SESSION=postgresql://postgres.<project>:<password>@aws-1-ap-southeast-1.pooler.supabase.com:5432/postgres
# Redis — Upstash. Derived state only.
SVCFORGE_REDIS_DSN=rediss://default:<token>@<endpoint>.upstash.io:6379

# API
SVCFORGE_JWKS_URL=https://<issuer>/protocol/openid-connect/certs
SVCFORGE_JWT_ISSUER=https://<issuer>
SVCFORGE_JWT_AUDIENCE=svcforge

# Worker
SVCFORGE_WORKER_ID=worker-local
SVCFORGE_WORKER_CONCURRENCY=4