.env.example

CONN_STR=postgresql+psycopg://finitum:yourpassword@db:5432/finitum

PGUSER=finitum
PGPASSWORD=yourpassword
PGDATABASE=finitum

REDIS_URL=redis://redis:6379/0
GOOGLE_CLIENT=your-google-client-id
GOOGLE_SECRET=your-google-client-secret
GOOGLE_REDIRECT_URI=http://localhost:9090/google_oauth2callback

REFRESH_TOKEN_KEY=some-key
ACCESS_TOKEN_KEY=some-key
SECRET_KEY=your-jwt-secret
# Fernet key for encrypting Google credential tokens at rest.
# Generate with: python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
CREDENTIALS_ENCRYPTION_KEY=your-fernet-key
TZ=America/Santiago
DEBUG=true

SESSION_SECRET=some-key
REDIS_URL=redis://redis:6379/0
CELERY_BROKER_URL=${REDIS_URL}
CELERY_RESULT_BACKEND=${REDIS_URL}

ALLOWED_ORIGINS="http://localhost:5173 https://mydomain.com"

# Forwarding ingestion (Phase 2)
# Full mail domain for per-user ingest addresses: u-<token>@<INGEST_DOMAIN>
# Use the apex with Cloudflare Email Routing enabled on it (recommended).
INGEST_DOMAIN=finitum.app
# Shared HMAC secret; must match the Cloudflare email worker's INGEST_WEBHOOK_SECRET
INGEST_WEBHOOK_SECRET=your-ingest-webhook-secret
# Legacy Gmail API polling. Disabled by default now that forwarding ingestion exists.
GMAIL_POLLING_ENABLED=false