# -------------------------------
#   API Server Configuration
# -------------------------------
# Copy to api.yml and fill in your values (api.yml is not committed with real secrets).

API:
  Enabled: true
  Port: 3000

  SecretKey: "CHANGE_ME"

  # Set to 1 when the dashboard is behind nginx, Cloudflare, Pterodactyl proxy, etc.
  # so http/https is detected from X-Forwarded-Proto.
  TrustProxy: false

  OAuth:
    Enabled: true
    ClientId: "DISCORD_CLIENT_ID"
    ClientSecret: "DISCORD_CLIENT_SECRET"
    # Canonical callback URL (host + path). Protocol (http/https) can follow the
    # browser when UseRequestOrigin is true (default).
    RedirectUri: "http://localhost:3000/api/auth/discord/callback"
    # Optional: register extra callback URLs in Discord and list them here.
    # RedirectUris:
    #   - "https://bot.example.com/api/auth/discord/callback"
    # UseRequestOrigin: true
    # CookieSecure: false
    OwnerUserIds:
      - "YOUR_DISCORD_USER_ID"
    AllowedUserIds: []