# App secrets — copy to `.env.development.local` and fill in. Gitignored.

# Session cookie signing secret (openssl rand -hex 32). Required for auth.
SESSION_SECRET=

# Hugging Face OAuth (huggingface.co/settings/applications)
# Redirect URL: ${APP_URL}/api/auth/callback
HF_OAUTH_CLIENT_ID=
HF_OAUTH_CLIENT_SECRET=

# Admin usernames (comma-separated, lowercased). Grants /admin access.
ADMIN_USERS=mrfakename

# Provider API keys — each provider activates when its key(s) are set.
ELEVENLABS_API_KEY=
MINIMAX_API_KEY=
MINIMAX_GROUP_ID=

# Optional private provider plugin packages (comma-separated)
PROVIDER_PLUGINS=