APP_BASE_URL={{ lookup('tls', application_id, 'url.base') | dotenv_quote }}

CANONICAL_DOMAIN={{ lookup('domain', application_id) | dotenv_quote }}

LOGOUT_SERVICE_ENABLED={{ lookup('config', application_id, 'services.logout.enabled') | string | lower }}

# nocheck: persona-block-rationale — Social Home 2026.6.16 wires `logout` only as the 401 handler and renders no logout control, so personas/utils/logout.js has nothing to click and the admin journey cannot close (see TODO.md "Blocked personas").
PERSONA_ADMINISTRATOR_BLOCKED=true

# nocheck: persona-block-rationale — the app authenticates against its own platform_users table with no OIDC client and no auto-provisioning, so the biber account never exists inside Social Home (see TODO.md "Blocked personas").
PERSONA_BIBER_BLOCKED=true

SSO_SERVICE_ENABLED={{ lookup('config', application_id, 'services.sso.enabled') | string | lower }}