#!/usr/bin/env bash

export YUCCA_ADMIN_API_PORT=${YUCCA_ADMIN_API_PORT:-3030}

export POSTGRES_HOST=${POSTGRES_HOST:-localhost}
export POSTGRES_USERNAME=${POSTGRES_USERNAME:-postgres}
export POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-postgres}
export POSTGRES_DATABASE=${POSTGRES_DATABASE:-yucca}
export POSTGRES_PORT=${POSTGRES_PORT:-15432}

# The project's well-known local-dev ES256 keypair (same fixture as
# .mise/tasks/yucca-api/env); signs CLI session JWTs in dev.
export JWT_PRIVATE_KEY=${JWT_PRIVATE_KEY:------BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgCla79+Sip4o2hZ1K
nQJYp2xU/nsCJmRoZmvXjeX6cW+hRANCAASkubBRIE7Sns/VS8ZF5XEVO8CwJ+AZ
Ls1C0ncCcmRhqKA7UxLknn0ji5FcKaku1zBOhxQYcxFVmsYtAxZ1ljgN
-----END PRIVATE KEY-----
}

# Dev restic minting: the same dev keypair signs repo tokens (michael's dev
# public key matches), pointed at the local michael.
export RESTIC_JWT_PRIVATE_KEY=${RESTIC_JWT_PRIVATE_KEY:-$JWT_PRIVATE_KEY}
export TOPOLOGY_FILE=${TOPOLOGY_FILE:-./topology.dev.json}
export LEGACY_SITE_CODE=${LEGACY_SITE_CODE:-local}
export LEGACY_STORAGE_CLUSTER_CODE=${LEGACY_STORAGE_CLUSTER_CODE:-local-dev}

export OIDC_ADMIN_ISSUER=${OIDC_ISSUER:-http://localhost:8092}
export OIDC_ADMIN_CLIENT_ID=${OIDC_CLIENT_ID:-client ID}
export OIDC_ADMIN_CLIENT_SECRET=${OIDC_CLIENT_SECRET:-client secret}
export OIDC_ADMIN_ALLOW_INSECURE=${OIDC_ALLOW_INSECURE:-true}
export OIDC_ADMIN_REDIRECT_URI=${OIDC_REDIRECT_URI:-http://localhost:3030/api/auth/oidc/callback}
export OIDC_ADMIN_LOGOUT_REDIRECT_URI=${OIDC_LOGOUT_REDIRECT_URI:-http://localhost:3030}
