.env

#version=1.1
#URL=https://github.com/tailscale-dev/ScaleTail
#COMPOSE_PROJECT_NAME= # Optional: only use when running multiple deployments on the same infrastructure.

# Service Configuration
SERVICE=formbricks # Service name (e.g., adguard). Used as hostname in Tailscale and for container naming (app-${SERVICE}).
IMAGE_URL=ghcr.io/formbricks/formbricks:latest

# Network Configuration
SERVICEPORT=3000 # Port to expose to local network. Uncomment the "ports:" section in compose.yaml to enable.
DNS_SERVER=9.9.9.9 # Preferred DNS server for Tailscale. Uncomment the "dns:" section in compose.yaml to enable.

# Tailscale Configuration
TS_AUTHKEY= # Auth key from https://tailscale.com/admin/authkeys. See: https://tailscale.com/kb/1085/auth-keys#generate-an-auth-key for instructions.

# Time Zone setting for containers 
TZ=Europe/Amsterdam # See: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones

# Optional Service variables
# PUID=1000

# Any Container environment variables are declared below. See https://docs.docker.com/compose/how-tos/environment-variables/

######################################################## REQUIRED ########################################################

# Your tailnet domain
TS_URL="formbricks.<YOUR_TAILNET>.ts.net"

# The url of your Formbricks instance used in the admin panel
# Set this to your public-facing URL, e.g., https://example.com
WEBAPP_URL=http://${TS_URL}:3000

# Required for next-auth. Should be the same as WEBAPP_URL
NEXTAUTH_URL=${WEBAPP_URL}

# Set the below to your public domain (default is WEBAPP_URL)
PUBLIC_URL=${WEBAPP_URL}

# PostgreSQL DB for Formbricks to connect to
DATABASE_URL="postgresql://postgres:postgres@postgres:5432/formbricks?schema=public"

# NextJS Auth
# @see: https://next-auth.js.org/configuration/options#nextauth_secret
# You can use: `openssl rand -hex 32` to generate a new one
NEXTAUTH_SECRET="7b62c37371798cf96dc019f3d4f712a27d1b05d0755ffcf96481b8504697f532"

# Encryption Key is used for 2FA & Single use URLs for Link Surveys
# You can use: `openssl rand -hex 32` to generate a new one
ENCRYPTION_KEY="i1e284266e3f7ace4772e329e0494aa1d6110fba48db06bd9652e7a9fdd167281"

# API Secret for running cron jobs.
# You can use: `openssl rand -hex 32` to generate a new one
CRON_SECRET="b5af3d39789e7730004a01bb84922914ea0b478fe67784ce3fa8e4c35096d6b4"

# Redis URL for caching, rate limiting, and audit logging
# To use external Redis/Valkey: remove the redis service below and update this URL
REDIS_URL="redis://redis:6379"

# Set the minimum log level(debug, info, warn, error, fatal)
LOG_LEVEL="info"

############################################# OPTIONAL (ENTERPRISE EDITION) #############################################

# Enterprise License Key (More info at: https://formbricks.com/docs/self-hosting/license)
# Required to access Enterprise-only features
# ENTERPRISE_LICENSE_KEY=""

############################################# OPTIONAL (EMAIL CONFIGURATION) #############################################

# Email Configuration
MAIL_FROM="from@some.host"
MAIL_FROM_NAME="from host"
SMTP_HOST="some.host"
SMTP_PORT="587"
SMTP_USER="SMTPUser"
SMTP_PASSWORD="SMTPPassword"
SMTP_AUTHENTICATED="1"

# (Additional option for TLS (port 465) only)
SMTP_SECURE_ENABLED="0"

# If set to 0, the server will accept connections without requiring authorization from the list of supplied CAs (default is 1).
SMTP_REJECT_UNAUTHORIZED_TLS="1"

############################################## OPTIONAL (APP CONFIGURATION) ##############################################

# Set the below to 0 to enable Email Verification for new signups (will required Email Configuration)
EMAIL_VERIFICATION_DISABLED="1"

# Set the below to 0 to enable Password Reset (will required Email Configuration)
PASSWORD_RESET_DISABLED="1"

# Set the below to 1 to disable logins with email
EMAIL_AUTH_DISABLED="0"

# Set the below to 1 to disable invites
INVITE_DISABLED="0"

# Set the below if you want to ship JS & CSS files from a complete URL instead of the current domain
# ASSET_PREFIX_URL=""

# Set the below to your Unsplash API Key for their Survey Backgrounds
# UNSPLASH_ACCESS_KEY=""

# The SENTRY_DSN is used for error tracking and performance monitoring with Sentry.

# SENTRY_DSN=""

# It's used for authentication when uploading source maps to Sentry, to make errors more readable.
# SENTRY_AUTH_TOKEN=""

# The SENTRY_ENVIRONMENT is used to identify the environment in Sentry.
# SENTRY_ENVIRONMENT=""

################################################### OPTIONAL (STORAGE) ###################################################

# Set S3 Storage configuration (required for the file upload in serverless environments like Vercel)
# S3_ACCESS_KEY=""
# S3_SECRET_KEY=""
# S3_REGION=""
# S3_BUCKET_NAME=""

# Set a third party S3 compatible storage service endpoint like StorJ leave empty if you use Amazon S3
# S3_ENDPOINT_URL=""

# Force path style for S3 compatible storage (0 for disabled, 1 for enabled)
S3_FORCE_PATH_STYLE="0"

############################################# OPTIONAL (OAUTH CONFIGURATION) #############################################

# Set the below from Cloudflare Turnstile if you want to enable turnstile in signups
# TURNSTILE_SITE_KEY=""
# TURNSTILE_SECRET_KEY=""

# Set the below keys to enable recaptcha V3 for survey responses bot protection(only available in the Enterprise Edition)
# RECAPTCHA_SITE_KEY=""
# RECAPTCHA_SECRET_KEY=""

# Set the below from GitHub if you want to enable GitHub OAuth
# GITHUB_ID=""
# GITHUB_SECRET=""

# Set the below from Google if you want to enable Google OAuth
# GOOGLE_CLIENT_ID=""
# GOOGLE_CLIENT_SECRET=""

# Set the below from Azure Active Directory Login if you want to enable Azure AD OAuth
# AZUREAD_CLIENT_ID=""
# AZUREAD_CLIENT_SECRET=""
# AZUREAD_TENANT_ID=""

# Set the below to OpenID Connect Provider if you want to enable OIDC
# OIDC_CLIENT_ID=""
# OIDC_CLIENT_SECRET=""
# OIDC_ISSUER=""
# OIDC_DISPLAY_NAME=""
# OIDC_SIGNING_ALGORITHM=""

# Set the below to SAML Provider if you want to enable SAML
# SAML_DATABASE_URL="postgresql://postgres:postgres@postgres:5432/formbricks-saml?sslmode=disable"

########################################## OPTIONAL (THIRD PARTY INTEGRATIONS) ###########################################

# Oauth credentials for Notion Integration
# NOTION_OAUTH_CLIENT_ID=""
# NOTION_OAUTH_CLIENT_SECRET=""

# Oauth credentials for Google Sheet Integration
# GOOGLE_SHEETS_CLIENT_ID=""
# GOOGLE_SHEETS_CLIENT_SECRET=""
# GOOGLE_SHEETS_REDIRECT_URL=""

# Oauth credentials for Airtable Integration
# AIRTABLE_CLIENT_ID=""

# Oauth credentials for Slack Integration
# SLACK_CLIENT_ID=""
# SLACK_CLIENT_SECRET=""

############################################### OPTIONAL (LEGAL INFORMATION) ################################################

# Set the below to have your own Privacy Page URL on auth & link survey page
# PRIVACY_URL=""

# Set the below to have your own Terms Page URL on auth & link survey page
# TERMS_URL=""

# Set the below to have your own Imprint Page URL on auth & link survey page
# IMPRINT_URL=""

# Set the below to have your own Address on email footer
# IMPRINT_ADDRESS=""

########################################## OPTIONAL (SERVER CONFIGURATION) ###########################################

# Set the below to 1 to disable Rate Limiting across Formbricks
RATE_LIMITING_DISABLED="1"

# Set the below to send OpenTelemetry data for tracing
# OPENTELEMETRY_LISTENER_URL="http://localhost:4318/v1/traces"

########################################## OPTIONAL (AUDIT LOGGING) ###########################################

# Set the below to 1 to enable audit logging.
AUDIT_LOG_ENABLED="1"

# Set the below to get the ip address of the user from the request headers
AUDIT_LOG_GET_USER_IP="1"

############################################# OPTIONAL (OTHER) #############################################

# signup is disabled by default for self-hosted instances, users can only signup using an invite link, in order to allow signup from SSO(without invite), set the below to 1
AUTH_SKIP_INVITE_FOR_SSO="0"

# Set the below to automatically assign new users to a specific team, insert an existing team id
# (Role Management is an Enterprise feature)
# AUTH_SSO_DEFAULT_TEAM_ID=""

# Configure the minimum role for user management from UI(owner, manager, disabled)
USER_MANAGEMENT_MINIMUM_ROLE="manager"

# Configure the maximum age for the session in seconds. Default is 86400 (24 hours)
SESSION_MAX_AGE="86400"