CMS_HTTP_ADDR=:8080
CMS_APPLICATION_DATABASE_URL="host=localhost user=cms password=cms dbname=cms port=5432 sslmode=disable"
CMS_ALLOWED_ORIGINS=http://localhost:5173

# Single sign-on. The CMS does not sign anyone in: an identity-aware proxy
# (oauth2-proxy, Authelia, Cloudflare Access, ...) authenticates the owner and
# forwards a header on every accepted request. Requests without it are anonymous.
#
# Header the proxy sets. oauth2-proxy forwards its access token in
# X-Auth-Request-Access-Token; Authelia uses Remote-User or Authorization.
CMS_SSO_HEADER=X-SSO-Token
# Optional shared secret. Leave empty to accept any non-empty forwarded value.
CMS_SSO_TOKEN=
# Optional cookie fallback when the proxy sets a cookie instead of a header.
CMS_SSO_COOKIE=