# Absolute path to the games root directory (must contain public/ and private/ subdirs)
GAMES_PATH=/path/to/games

# Where to store the SQLite database file
DB_PATH=/path/to/data/game-grid.db

# The shared login password for the private library
APP_PASSWORD=changeme

# Random 32+ character secret for signing session cookies
SESSION_SECRET=replace-with-a-random-string-at-least-32-chars

# The URL clients use to reach this app — required for login to work in production.
# Examples: http://192.168.1.100:3000  |  https://games.yourdomain.com
# Not needed in dev (npm run dev) — only for built/Docker deployments.
ORIGIN=http://localhost:3000

# Set to "true" only when the app is behind an HTTPS reverse proxy (nginx, Caddy, etc.)
# Leave unset or "false" for plain HTTP on a local network
SECURE_COOKIES=false