# -------------------------------
#   API Server Configuration
# -------------------------------
# Copy to api.yml and fill in your values (api.yml is not committed with real secrets).

API:
  Enabled: true
  Port: 3000

  SecretKey: "SECRET_KEY"
  # Set to 1 when the dashboard is behind nginx, Cloudflare, Pterodactyl proxy, etc.
  # so http/https is detected from X-Forwarded-Proto.

  TrustProxy: false

  EmeraldAPIKey: "EMERALDSRV_API_KEY"

  OAuth:
    Enabled: true
    ClientId: "1530910674551574580"
    ClientSecret: "GIWdonM3bdFILhkg_1XWWeVQRlGf_npu"
    # Canonical callback URL (host + path). Protocol (http/https) can follow the
    # browser when UseRequestOrigin is true (default).

    RedirectUri: "http://localhost:3000/api/auth/discord/callback"
    # Optional: register extra callback URLs in Discord and list them here.
    # RedirectUris:
    #   - "https://bot.example.com/api/auth/discord/callback"
    # UseRequestOrigin: true
    # CookieSecure: false

    OwnerUserIds:
      - "OWNER_ID"
    AllowedUserIds: []