# Copy to a private deployment environment/.env file. Never commit secrets.
BUTTON_OIDC_ISSUER=https://dex.eom.dev
BUTTON_OIDC_CLIENT_ID=the-button
BUTTON_OIDC_CLIENT_SECRET=replace-with-dex-client-secret
BUTTON_OIDC_REDIRECT_URI=https://button.eom.dev/auth/oidc/callback
BUTTON_OIDC_REQUIRED_GROUP=the-button-users
BUTTON_OIDC_ADMIN_GROUP=the-button-admins
BUTTON_OIDC_SUBJECT_LINKS_JSON={}
BUTTON_OIDC_ADMIN_SUBJECTS_JSON=[]
BUTTON_OIDC_REGISTER_URL=https://lists.eom.dev/accounts/register/
BUTTON_OIDC_COOKIE_SECURE=1
# HTTP is allowed only in isolated local OIDC tests:
# BUTTON_OIDC_ALLOW_HTTP=1