ktor {
    deployment {
        port = 8080
        port = ${?PORT}
    }
    application {
        modules = [ dev.ulfrx.recipe.ApplicationKt.module ]
    }
}

database {
    url = "jdbc:postgresql://localhost:5432/recipe"
    url = ${?DATABASE_URL}
    user = "recipe"
    user = ${?DATABASE_USER}
    password = "recipe"
    password = ${?DATABASE_PASSWORD}
}

oidc {
    # Authentik OIDC issuer (trailing slash required — see Constants.OIDC_ISSUER / D-11).
    issuer = "https://auth.ulfrx.dev/application/o/recipe-app/"
    issuer = ${?OIDC_ISSUER}
    # Audience pinned to client_id per D-07.
    audience = "recipe-app"
    audience = ${?OIDC_AUDIENCE}
    # Optional override; if blank, AuthConfig.fromApplicationConfig derives `${issuer}jwks/`.
    jwksUrl = "https://auth.ulfrx.dev/application/o/recipe-app/jwks/"
    jwksUrl = ${?OIDC_JWKS_URL}
    leewaySeconds = "30"
}