.env.example

# Create a private `.env` next to docker-compose.yml, then set strong, unique
# values. Do not use a plain `cp`, which commonly creates a world-readable file:
#   install -m 600 .env.example .env
# docker compose reads this file automatically. These have NO defaults on
# purpose — `docker compose up` fails fast if they are unset, so no known
# credential ever ships in a deployment.
#
# Passwords are also embedded in connection URLs. Use only A-Z, a-z, 0-9,
# underscore, and hyphen; startup rejects other characters before any database
# service starts. Generate independent 256-bit URL-safe values with:
#   openssl rand -hex 32

# PostgreSQL password for the `temps` role (used by postgres and the app).
POSTGRES_PASSWORD=

# Redis password (enforced via `--requirepass`; used by redis and the app).
REDIS_PASSWORD=

# Group ID that owns the Docker socket. Docker access is root-equivalent and is
# required for deployment management. Determine the container-visible GID on
# Linux or macOS with:
# docker run --rm -v /var/run/docker.sock:/var/run/docker.sock alpine:3.22 stat -c '%g' /var/run/docker.sock
DOCKER_GID=

# Initial administrator for unattended first startup. The password file is
# mounted read-only as a Compose secret rather than exposed in container env or
# argv. Keep its parent directory mode 0700 and the file mode 0444 so the
# image's non-root UID can read—but not modify—it on Linux.
TEMPS_ADMIN_EMAIL=
TEMPS_ADMIN_PASSWORD_FILE=./secrets/admin_password