config.example.yaml

oss:
  # Server endpoint: used by the server for HeadObject, Delete, etc.
  # Falls back to client_upload_endpoint if not set.
  server_endpoint: ""
  # Client upload endpoint (required): public S3-compatible endpoint for browser direct upload via presigned URL.
  #   Aliyun OSS:  s3.oss-cn-hangzhou.aliyuncs.com
  #   AWS S3:      s3.us-east-1.amazonaws.com
  #   MinIO:       minio.example.com
  client_upload_endpoint: "s3.oss-cn-hangzhou.aliyuncs.com"
  # Client download endpoint: browser preview/download. CDN domain (with private bucket origin-pull) or public endpoint.
  client_download_endpoint: ""
  access_key_id: ""
  access_key_secret: ""
  bucket: ""
  region: "cn-hangzhou"
  max_presign_batch: 100  # max presigned URLs returned per presign request

server:
  port: 8080
  pid_file: "zephyr.pid"
  cors_origins: ""  # optional, comma-separated origins for CORS when frontend and backend use different origins
  # example: "http://localhost:5173,https://zephyr.willvar.cn"
  # session_secret and encryption_secret are auto-generated on first startup
  # first startup root password: prefer a 0600 secret file; fallback env is ZEPHYR_ROOT_BOOTSTRAP_PASSWORD
  root_bootstrap_password_file: ""

log:
  level: "info"
  file: ""  # empty = stdout

database:
  host: "localhost"
  port: 5432
  user: "postgres"
  password: ""
  dbname: "zephyr"
  sslmode: "disable"

upload:
  max_file_size: 10737418240  # 10GB

# SMTP (optional, required for email verification)
smtp:
  host: ""
  port: 465
  username: ""
  password: ""
  from: ""