name = "baron-qa-gateway-prod"
main = "src/index.js"
compatibility_date = "2026-09-18"
account_id = "81fa2d48964d31dd0da9558f9ce601d1"
workers_dev = false
preview_urls = false

# qa.baroncs.co.kr is already attached to this Worker in the Cloudflare dashboard.
# Keep route/routes absent so deployments preserve that connection without zone writes.

[vars]
AUTH_REDIRECT_URI = "https://qa.baroncs.co.kr/auth/callback"
AUTH_POST_LOGOUT_REDIRECT_URI = "https://qa.baroncs.co.kr/"
AUTH_SCOPE = "openid tenants profile email"
AUTH_AUTHORIZE_URL = "https://sso.hmac.kr/oidc/oauth2/auth"
AUTH_TOKEN_URL = "https://sso.hmac.kr/oidc/oauth2/token"
AUTH_USERINFO_URL = "https://sso.hmac.kr/oidc/userinfo"
SESSION_COOKIE_NAME = "baron_qa_prod_session_v1"
OAUTH_COOKIE_NAME = "baron_qa_prod_oauth_v1"
SESSION_TTL_SECONDS = "3600"
ABC_SOURCE_NAMESPACE = "EGBIM_QA_PROD"
ABC_IDEMPOTENCY_CONSUMER = "EGBIM_QA_PROD"
PUBLIC_EXACT_PATHS = "/,/index.html,/favicon.ico"
PUBLIC_PREFIXES = "/egbim/,/tova/,/gaia/,/shared/,/assets/,/auth/"
PROTECTED_PREFIXES = "/egbim/,/tova/,/gaia/"
PROTECTED_EXACT_PATHS = "/egbim/write.html,/egbim/detail.html"
INTERNAL_ONLY_PREFIXES = "/protected/"

[[r2_buckets]]
binding = "QA_BUCKET"
bucket_name = "baron-qa-write"

[observability]
enabled = true

[observability.logs]
enabled = true