# App
NEXT_PUBLIC_APP_URL=http://localhost:3000

# API
NEXT_PUBLIC_API_URL=http://localhost:3001/api

# NextAuth
NEXTAUTH_URL=http://localhost:3000
NEXTAUTH_SECRET=your-super-secret-key-change-in-production

# Keycloak (must match realm-export.json client "tos-frontend")
KEYCLOAK_CLIENT_ID=tos-frontend
KEYCLOAK_CLIENT_SECRET=your-keycloak-frontend-client-secret
KEYCLOAK_ISSUER=http://localhost:8080/realms/tOS