# ─── Client environment overrides (Vite: only VITE_-prefixed vars are inlined) ───
# See PORTS.md for the canonical port plan. Defaults are non-colliding
# so tenant + superadmin can run side-by-side.

# ─── Port allocation ────────────────────────────────────────────────────
VITE_PORT=3000                                  # Vite dev server (client/vite.config.ts)
VITE_API_TARGET=http://127.0.0.1:3001           # target for /api + /uploads proxy
VITE_WS_TARGET=ws://127.0.0.1:3001              # target for /ws + /socket proxy

# ─── SuperAdmin licensing ───────────────────────────────────────────────
# Placeholder — replace with the matching SuperAdmin public key.
VITE_SUPERADMIN_PUBLIC_KEY=-----BEGIN PUBLIC KEY-----\nREPLACE_ME\n-----END PUBLIC KEY-----
# Tenant → SuperAdmin JWKS endpoint. Only the SuperAdmin server exposes
# JWKS. Default is the dev-proxy path; override to a full URL such as
#   http://localhost:3002/api/v1/auth/jwks
# in production (or any cross-origin setup). When the URL is absolute
# (http:// or https://) a one-off fetch() is used instead of the tenant
# axios instance.
VITE_SUPERADMIN_JWKS_URL=/api/v1/auth/jwks