.env.example

# Copy this file to .env and fill in the required values, then run:
#
#   docker compose up -d
#   docker compose logs init          # prints admin credentials on first run
#
# Open http://localhost:8080 and log in.

# ── Required ──────────────────────────────────────────────────────────────────

# PostgreSQL password — choose something strong for production.
POSTGRES_PASSWORD=change_me

# AES-256 key used to encrypt stored webhook secrets.
# Must be exactly 64 lowercase hex characters (32 bytes).
# Generate with: openssl rand -hex 32
WEBHOOK_SECRET_ENCRYPTION_KEY=replace_with_64_lowercase_hex_chars

# Required first-run administrator password. This is only used to create the
# account if it does not already exist.
# Generate with: openssl rand -base64 16
# SEED_ADMIN_PASSWORD=

# ── Optional: first-run admin account ────────────────────────────────────────
# The email is only used the first time the stack starts and defaults to
# admin@localhost.

# SEED_ADMIN_EMAIL=admin@example.com

# ── Optional: HTTPS / reverse proxy ──────────────────────────────────────────
# FOR LOCAL USE ONLY: required for http://localhost:8080.
# Remove this line for every remote or HTTPS deployment. Compose then defaults
# COOKIE_SECURE to true.
COOKIE_SECURE=false

# Published ports bind to localhost by default. Prefer the production reverse
# proxy overlay for remote access instead of changing these addresses.
# API_HOST_ADDRESS=127.0.0.1
# ADMIN_HOST_ADDRESS=127.0.0.1

# ── Optional: demo mode ───────────────────────────────────────────────────────
# Show demo credentials on the login screen. Requires a rebuild of the admin
# image (docker compose up --build) to take effect.
# VITE_SHOW_DEMO_ACCOUNT=false