.env.example

# ============================================================================
# Voltius server — self-hosting configuration
# ----------------------------------------------------------------------------
# Only JWT_SECRET is strictly required for a self-hosted setup.
# Everything else is optional — defaults are sensible.
# ============================================================================

# Required ---------------------------------------------------------------
JWT_SECRET=                          # generate with: openssl rand -hex 32

# Optional: override the bundled Postgres connection (compose default works)
# DATABASE_URL=postgres://voltius:voltius@db/voltius

# Optional: which host port to expose (default 14372)
# HOST_PORT=14372


# Email (optional, recommended) ------------------------------------------
# Without this, email verification + team invitations silently no-op.
# Accounts still work; users just don't receive mail.
# RESEND_API_KEY=re_...              # https://resend.com/api-keys


# CORS + reverse proxy (only matters for public deployments) -------------
# CORS_ORIGINS=https://voltius.example.com,tauri://localhost
# TRUSTED_PROXY_IP=127.0.0.1


# Rate-limit tunables (defaults are fine) --------------------------------
# SYNC_RATE_LIMIT=60                 # sync ops per hour per IP
# REGISTER_RATE_LIMIT=20             # account registrations per day per IP
# INVITE_RATE_LIMIT=20               # team invite emails per hour per IP
# WAITLIST_RATE_LIMIT=10             # mobile waitlist submissions per hour per IP


# Admin dashboard (optional) ---------------------------------------------
# Only set this if you also run the separate admin-dashboard container.
# Generate the same way as JWT_SECRET.
# ADMIN_SECRET=