# ── Auth Service ──────────────────────────────────────────────────────────────
# This file contains env vars specific to the Auth Service.
# Shared vars (DATABASE_URL, REDIS_URL, etc.) come from the root .env
# or from docker-compose environment.

# ── JWT RS256 Keys ────────────────────────────────────────────────────────────
# Generate keypair:
#   openssl genpkey -algorithm RSA -out private.pem -pkeyopt rsa_keygen_bits:2048
#   openssl rsa -in private.pem -pubout -out public.pem
#
# Paste PEM content with literal \n for newlines:
#   JWT_PRIVATE_KEY=-----BEGIN PRIVATE KEY-----\nMIIEvQ...
#   JWT_PUBLIC_KEY=-----BEGIN PUBLIC KEY-----\nMIIBIj...

# PRIVATE KEY — used to SIGN JWTs. NEVER share outside this service.
JWT_PRIVATE_KEY=

# PUBLIC KEY — used to VERIFY JWTs.
JWT_PUBLIC_KEY=