.env.example

PORT=3000
DB_PATH=./data/openlogtool.db
NODE_ENV=production

# Docker Compose binds to loopback by default. Change only when a firewall or
# trusted reverse proxy network protects the published port.
BIND_ADDRESS=127.0.0.1
HOST_PORT=3000

# Optional build-only npm registry override for slow or restricted networks.
# NPM_REGISTRY=https://registry.npmmirror.com

# Required in production. Generate independent random values; do not reuse them.
JWT_SECRET=
ADMIN_BOOTSTRAP_TOKEN=
INVITE_HMAC_KEY=
PUBLIC_SHARE_HMAC_KEY=

JWT_ISSUER=openlogtool-server
ACCESS_TOKEN_TTL_SECONDS=900
REFRESH_TOKEN_TTL_DAYS=30

# Comma-separated browser origins. Native clients and same-origin pages need no entry.
CORS_ORIGINS=
# Keep false for direct exposure. Set to the exact trusted hop count (usually 1)
# when HTTPS is terminated by a reverse proxy, otherwise /ws Origin checks fail.
TRUST_PROXY=false
JSON_BODY_LIMIT=1mb
RATE_LIMIT_ENABLED=true