# =====================================================================
#  TravStats — Production environment
# =====================================================================
#
# Minimum configuration: set DB_PASSWORD. That is enough to get a
# running instance. Everything else (instance name, user cap, API keys,
# Ollama, backups, WebDAV) is configured from the admin UI after the
# first-run setup wizard.
#
# Override any of the optional variables below ONLY if you're running
# behind an unusual setup (external DB, reverse proxy without
# X-Forwarded-Proto, different Ollama host, …).
#
# Copy this file to `.env` and adjust.

# =====================================================================
#  REQUIRED
# =====================================================================

# PostgreSQL password for the bundled `db` service. Must be strong.
# Generate one:  openssl rand -base64 32
DB_PASSWORD=changeme-to-strong-password

# =====================================================================
#  OPTIONAL — infrastructure overrides
# =====================================================================

# Host port the web UI is exposed on.
APP_PORT=3000

# Force secure cookies on or off. Auto-detects HTTPS from the reverse
# proxy's X-Forwarded-Proto header when unset — leave this empty unless
# your proxy doesn't send that header.
# COOKIE_SECURE=true

# Allowed cross-origin list. Leave unset when the app is served
# same-origin behind a reverse proxy. Set when your frontend lives on a
# different hostname than the API.
# CORS_ORIGIN=https://travstats.example.com

# Container timezone. Keep UTC — TravStats schedulers and logs assume
# UTC, the UI renders everything in the user's locale regardless.
TZ=UTC

# =====================================================================
#  OPTIONAL — external Postgres instead of the bundled `db` service
# =====================================================================
#
# Use this if you want TravStats to talk to a Postgres you already run
# (homelab, managed DB, …). Takes precedence over DB_PASSWORD.
#
# DATABASE_URL=postgresql://user:pass@postgres.lan:5432/travstats