.env.example

# HonoAdmin Bun runtime example.
# Copy this file to .env for local Bun/runtime deployment.

# SQLite file path, mysql://, mysql2://, postgres://, or postgresql://.
DATABASE_URL=./honox-admin.sqlite

# Used for admin time display and c.now().
APP_TIMEZONE=Asia/Shanghai

# Local memory cache namespace.
CACHE_NAMESPACE=honox-admin

# Reserved for API/JWT features. Use a strong random value, at least 16 chars.
JWT_SECRET=replace-with-a-strong-random-jwt-secret

# Used to sign admin session cookies. Keep it different from JWT_SECRET.
SESSION_SECRET=replace-with-a-strong-random-session-secret

# Optional: where the install page reads/writes Bun runtime config.
# HONO_ADMIN_ENV_FILE=/absolute/path/to/.env

# Optional request/upload limits.
REQUEST_BODY_LIMIT_BYTES=6291456
UPLOAD_IMAGE_LIMIT_BYTES=5242880

# Optional login throttling. Defaults: 30 attempts per IP and 10 per IP+account
# within 15 minutes. Successful login clears both buckets.
LOGIN_RATE_LIMIT_IP_MAX=30
LOGIN_RATE_LIMIT_ACCOUNT_MAX=10
LOGIN_RATE_LIMIT_WINDOW_SECONDS=900

# Optional admin API throttling.
API_RATE_LIMIT_MAX=120
API_RATE_LIMIT_WINDOW_SECONDS=60