.env.example

DB_NAME=opencrm
DB_USER=opencrm
DB_PASSWORD=changeme
DB_PORT=5432
BACKEND_PORT=9081
FRONTEND_PORT=4001
MOCK_OAUTH2_PORT=8888

# Meilisearch — global typo-tolerant search
# The master key is exchanged at backend startup for a scoped key; only
# the scoped key is used at runtime. Use a strong random value in production.
MEILI_MASTER_KEY=local-dev-master-key
MEILI_PORT=7700
MEILI_INDEX_PREFIX=crm_
OIDC_ISSUER_URI=http://localhost:8888/default
OIDC_JWK_SET_URI=http://localhost:8888/default/jwks
OIDC_CLIENT_ID=open-crm
OIDC_CLIENT_SECRET=open-crm-secret
# Auth.js base URL — must match the URL users access in the browser
AUTH_URL=http://localhost:4001
# Auth.js session encryption key — generate a strong random value for production
AUTH_SECRET=change-me-to-a-random-secret

# MCP server (Onyx) — read-only Model Context Protocol endpoint at /mcp.
# Off by default: enabling it grants every existing API key read access to all
# personal CRM data via MCP. See README "MCP Server (Onyx AI)".
MCP_ENABLED=false
MCP_AUTH_API_KEY_ENABLED=true

# Translation — OpenAI-compatible API (e.g. Mittwald AI Hosting)
TRANSLATION_API_URL=https://llm.aihosting.mittwald.de/v1
TRANSLATION_API_KEY=sk-ksmcjkavknnjdsc
TRANSLATION_MODEL=gpt-oss-120b

# Database backup — db-backup-service + S3-compatible object storage (spec 107)
# DB_BACKUP_-prefixed so they don't clash with any other sidecar's S3 creds.
# The endpoint host and region must match (e.g. fsn1.* ⇄ fsn1, hel1.* ⇄ hel1).
DB_BACKUP_S3_BUCKET=dein-bucket-name
DB_BACKUP_S3_PREFIX=open-crm
DB_BACKUP_S3_ENDPOINT=https://fsn1.your-objectstorage.com
DB_BACKUP_AWS_ACCESS_KEY_ID=dein-access-key
DB_BACKUP_AWS_SECRET_ACCESS_KEY=dein-secret-key
DB_BACKUP_AWS_DEFAULT_REGION=fsn1
# Bearer token shared between the db-backup-service container and the backend's
# DbBackupClient. Generate a strong random value, e.g. `openssl rand -hex 32`.
# Leave blank to run without backups: the backend still boots and the admin
# backup page shows "not configured".
DB_BACKUP_API_TOKEN=
# Backup schedule for the db-backup-service (ISO-8601 or shorthand, default: 24h)
BACKUP_INTERVAL=24h
# Number of days to keep old backups (default: 30)
BACKUP_RETENTION_DAYS=30