# copy to .dev.vars (git-ignored) for local dev, and set the same in
# `wrangler secret put` / Cloudflare project settings for prod.

# admin panel (/admin)
ADMIN_PASSWORD=
# 32+ random bytes, e.g. `openssl rand -hex 32`
SESSION_SECRET=

# one-time: get a refresh token via the spotify authorization-code flow with
# scopes: user-read-currently-playing user-read-recently-played user-top-read
# without these the "now playing" / "on repeat" sections just stay hidden.
SPOTIFY_CLIENT_ID=
SPOTIFY_CLIENT_SECRET=
SPOTIFY_REFRESH_TOKEN=