test

      AUTH_URL: "https://auth.example.com"

      AUTH_CLIENTNAME: "blogiclient"

      AUTH_CLIENTSECRET: "clientsecret"

      # AUTH_TLS_VERIFY: false   # default true; set false for a bare-IP authdb

                                  # endpoint whose cert SAN doesn't cover it

      MEDIA_URL: "https://127.0.0.1:8442"

      # mediadb reached over loopback with a self-signed cert -- MEDIA_TLS_VERIFY

      # defaults to false already, shown here for discoverability. Set true if

      # mediadb presents a cert that verifies against this host's CA bundle.

      MEDIA_TLS_VERIFY: false

      # CHROOTDIR: "/srv/blogi/chroot/blog.example.com"

      # Linux: the worker process calls chroot(2) into this directory before

      # starting the event loop.  All paths in this domain config (DB, template,