initial commit on Federted servers

web/.env.example

@@ -0,0 +1,21 @@
+# Copy to .env for local (non-Docker) development of the web app only.
+# The Docker stack is configured from the repository-root .env instead —
+# see ../.env.example and ../RUNNING.md. The frontend has no database
+# connection; all persistence goes through the Go API.
+
+# Shared secret used to verify NextAuth sessions and sign the 60-second
+# identity assertions for the Go API. Must equal the root AUTH_SECRET.
+AUTH_SECRET="<SAME_RANDOM_SECRET_AS_ROOT_ENV>"
+
+# Public URL the app is served on (used for auth callbacks).
+NEXTAUTH_URL="http://localhost:3000"
+
+# Go API base URL. Server-side only: inside Docker Compose this is the
+# service DNS name http://app:8080. For local `next dev` use the host URL.
+API_BASE_URL="http://localhost:8080"
+
+# Authelia OIDC: stubbed until the client integration is complete
+# (see docs/AUTHELIA.md). Setting values enables the config display only.
+OIDC_ISSUER=
+OIDC_CLIENT_ID=
+OIDC_CLIENT_SECRET=