# S3 Signature V4 credentials held by CLI clients or your BFF
ACCESS_KEY=replace-with-access-key-id
SECRET_KEY=replace-with-long-random-secret
REGION=auto

# Google OAuth credentials with Drive API access
GOOGLE_CLIENT_ID=replace-with-google-oauth-client-id
GOOGLE_CLIENT_SECRET=replace-with-google-oauth-client-secret
GOOGLE_REFRESH_TOKEN=replace-with-google-refresh-token

# Google Drive storage root folder name
DRIVE_ROOT_FOLDER=s3-storage

# Plaintext password for dashboard management API authentication
DASHBOARD_PASSWORD=replace-with-dashboard-password

# Durable Object multipart uploads and ETag result behavior
ALLOW_MULTIPART=true
ETAG_STYLE=md5

# Browser CORS: comma-separated exact origins or *. Leave empty to disable CORS.
CORS_ALLOWED_ORIGINS=http://localhost:5173
# Set false to disable /docs and /openapi.yaml
ENABLE_DOCS=true