DATABASE_URL="postgresql://hyboa_user:hyboa_password@localhost:5432/hyb_oa?schema=public"
JWT_SECRET="change_me"
# APP_ORIGIN="https://oa.hyinda.com"
# COOKIE_SECURE="true"
# DEV_SHOW_PASSWORD_RESET_CODE="true"
APP_TIMEZONE="Asia/Shanghai"
STORAGE_DIR="generated/storage"
SIGNED_URL_TTL_SECONDS="600"
MAX_UPLOAD_SIZE_BYTES="10485760"

# ===== 单域托管 client/dist（试运行/生产建议）=====
# SERVE_CLIENT_DIST="true"
# CLIENT_DIST_DIR="../client/dist"

# ===== 安全基线（默认：production=true，其它环境=false，可显式覆盖）=====
# RATE_LIMIT_ENABLED="true"
# RATE_LIMIT_LOGIN_MAX="10"
# RATE_LIMIT_LOGIN_WINDOW="1 minute"

DELEGATION_REVOKE_CRON="0 * * * *"

OCR_PROVIDER="off"
OCR_BATCH_SIZE="10"
OCR_LOCK_TTL_SECONDS="300"
OCR_POLL_CRON="* * * * *"
OCR_MAX_ATTEMPTS="3"
OCR_TIMEOUT_MS="5000"
TENCENT_SECRET_ID=""
TENCENT_SECRET_KEY=""
TENCENT_OCR_REGION="ap-beijing"

# ===== 试运行引导管理员（E20，可选）=====
# TRIALRUN_ADMIN_EMAIL="admin@hyinda.com"
# TRIALRUN_ADMIN_PHONE="13800000000"
# TRIALRUN_ADMIN_PASSWORD=""