# Vikunja secrets — copy to .env and fill with the REAL live values.
# .env is gitignored; never commit it.
#
# These three values MUST match the running instance or you lose access /
# break login at cutover. Do not regenerate them.

# Postgres superuser password for the vikunja DB.
POSTGRES_PASSWORD=change-me-very-strong

# Must be identical to POSTGRES_PASSWORD — this is how Vikunja connects to it.
VIKUNJA_DATABASE_PASSWORD=change-me-very-strong

# JWT signing secret. Changing it invalidates all existing sessions/tokens.
VIKUNJA_SERVICE_JWTSECRET=change-me-super-long-random-string

# OIDC client secret for the Forgejo provider (config.yml stays secret-free).
VIKUNJA_AUTH_OPENID_PROVIDERS_FORGEJO_CLIENTSECRET=change-me-forgejo-oidc-client-secret