# Leave empty in development; Vite proxies API requests to localhost:8080.
# Set this to the public backend URL when the frontend is hosted separately.
#
# The CMS has no sign-in endpoint of its own: the upstream SSO proxy
# authenticates the owner and the backend trusts the header it forwards.
VITE_API_BASE_URL=
VITE_SESSION_ENDPOINT=/api/auth/session
VITE_CONTENT_ENDPOINT=/api/content

# Google/IdP sign-in URL for the header button. The button redirects here, the
# provider authenticates you, and you come back with the identity header set.
# Leave empty to hide the button (for example when the proxy gates the app
# automatically instead). Examples:
#   oauth2-proxy:        /oauth2/start
#   hosted IdP:          https://idp.example.com/login
VITE_SSO_LOGIN_URL=