# --- REQUIRED ---
# OpenAI API Key (Variante B: NUR serverseitig, NIEMALS in Desktop-App)
OPENAI_API_KEY=sk-REPLACE_ME

# Token rotation (preferred): comma-separated, e.g. NEW,OLD
MEDWORK_API_TOKENS=REPLACE_WITH_STRONG_TOKEN_NEW,REPLACE_WITH_STRONG_TOKEN_OLD

# Legacy (optional): single token
# MEDWORK_API_TOKEN=REPLACE_WITH_STRONG_TOKEN

STRIPE_WEBHOOK_SECRET=whsec_REPLACE_ME

# Stripe API key for server-side portal session creation (required for billing portal)
STRIPE_SECRET_KEY=sk_live_REPLACE_ME

# --- OPTIONAL ---
AZA_ADMIN_TOKEN=REPLACE_WITH_STRONG_ADMIN_TOKEN
AZA_LOG_LEVEL=INFO
AZA_GRACE_DAYS=0

# Stripe redirect URLs (production)
STRIPE_SUCCESS_URL=https://aza-medwork.ch/billing/success?session_id={CHECKOUT_SESSION_ID}
STRIPE_CANCEL_URL=https://aza-medwork.ch/billing/cancel
STRIPE_PORTAL_RETURN_URL=https://aza-medwork.ch/

# Caddy / ACME
ACME_EMAIL=info@aza-medwork.ch
AZA_DOMAIN=api.aza-medwork.ch