# .env  ──────────────────────────────────────────
# Values you want to override permanently

# If an external Keycloak exists, point here;
# leave empty to fall back to the embedded container.
KEYCLOAK_URL=https://kc.kellsupport.com

# Custom project name (avoids long folder names in ~/.local/share/containers)
COMPOSE_PROJECT_NAME=cmmc-platform

# Keycloak OIDC config for Kong
KEYCLOAK_URL=https://kc.kellsupport.com
KEYCLOAK_REALM=cmmc
# KEYCLOAK_CLIENT_ID=kong-gateway
# KEYCLOAK_CLIENT_SECRET=3FefJAfN7Rox2x7EW7JzZ38vLI04cXMB
KEYCLOAK_CLIENT_ID=cmmc-oauth2-proxy
KEYCLOAK_CLIENT_SECRET=OOPXQpXhFeG57lC7G1AktnpPyodtDkib
OIDC_SESSION_SECRET=3b4b1b8c8366b1d7c50c49742f879bdd20b85d5b95adaaf4af38d89a36c372ab

OAUTH2_PROXY_CLIENT_ID=${KEYCLOAK_CLIENT_ID}
OAUTH2_PROXY_CLIENT_SECRET=${KEYCLOAK_CLIENT_SECRET}
OAUTH2_PROXY_COOKIE_SECRET=P1eo4uZRzZM1QNrXIlzlep5dsmbnJr1K19CETok0BhU=
OAUTH2_PROXY_PROVIDER_URL=https://kc.kellsupport.com/realms/cmmc