# Ollama Cloud API key
OLLAMA_API_KEY=your_ollama_api_key_here

# OIDC settings
# `OIDC_AUDIENCE` is optional. If set, the backend will validate the token's `aud` claim.
# If you prefer to skip audience validation (not recommended in production), leave
# `OIDC_AUDIENCE` unset.
OIDC_ISSUER=https://your-issuer.example.com
OIDC_CLIENT_ID=your-client-id
OIDC_CLIENT_SECRET=your-client-secret
OIDC_VERIFY_ISS=true

# Frontend redirect URI
VITE_OIDC_REDIRECT_URI=http://localhost:5173