# Postgres
DATABASE_URL="postgresql://postgres:postgres@localhost:5432/sistema_auth?schema=public"
DIRECT_DATABASE_URL="postgresql://postgres:postgres@localhost:5432/sistema_auth?schema=public"

# JWT contract
JWT_ISSUER="https://auth.local"
JWT_AUDIENCE="internal-apis"
JWT_ACCESS_TTL_SEC="900"
JWT_REFRESH_TTL_SEC="604800"
JWT_KID="auth-key-1"
JWT_PRIVATE_KEY_PEM="<replace-with-escaped-pem>"
JWT_PUBLIC_KEY_PEM="<replace-with-escaped-pem>"

# Optional hardening
REFRESH_TOKEN_PEPPER="change-me"
PASSWORD_RESET_TTL_SEC="900"
PASSWORD_RESET_TOKEN_PEPPER="change-me"
PASSWORD_RESET_BASE_URL="http://localhost:3000"