PROJECT_NAME=Fast Vben Admin
STACK_NAME=fast-vben-admin
ENVIRONMENT=local
DOMAIN=localhost
FRONTEND_HOST=http://localhost:5173
BACKEND_CORS_ORIGINS=["http://localhost:5173","http://localhost"]

SECRET_KEY=changethis
ACCESS_TOKEN_EXPIRE_MINUTES=11520

FIRST_SUPERUSER=admin@example.com
FIRST_SUPERUSER_PASSWORD=changethis

POSTGRES_SERVER=db
POSTGRES_PORT=5432
POSTGRES_DB=app
POSTGRES_USER=postgres
POSTGRES_PASSWORD=changethis

# Application API and Worker processes must not use the PostgreSQL owner role.
APP_RUNTIME_DB_USER=app_runtime
APP_RUNTIME_DB_PASSWORD=changethis

SMTP_HOST=mailcatcher
SMTP_PORT=1025
SMTP_TLS=false
SMTP_SSL=false
SMTP_USER=
SMTP_PASSWORD=
EMAILS_FROM_EMAIL=info@example.com

REDIS_URL=
REDIS_KEY_PREFIX=fast-vben-admin
REDIS_CACHE_TTL_SECONDS=300
REDIS_CONNECT_TIMEOUT_SECONDS=1
REDIS_SOCKET_TIMEOUT_SECONDS=1
LOGIN_RATE_LIMIT_ENABLED=true
LOGIN_RATE_LIMIT_MAX_ATTEMPTS=5
LOGIN_RATE_LIMIT_WINDOW_SECONDS=300
LOGIN_RATE_LIMIT_BLOCK_SECONDS=900
LOGIN_CAPTCHA_ENABLED=true
LOGIN_CAPTCHA_THRESHOLD=3
LOGIN_CAPTCHA_TTL_SECONDS=300
LOGIN_SLIDER_CAPTCHA_ENABLED=true
LOGIN_SLIDER_CAPTCHA_TTL_SECONDS=180
SMS_CODE_TTL_SECONDS=300
SMS_CODE_RESEND_SECONDS=60
SMS_CODE_MAX_ATTEMPTS=5
SMS_CODE_SEND_MAX_PER_IP=10
QR_CODE_LOGIN_TTL_SECONDS=180
MFA_TOTP_ENABLED=true
MFA_TOTP_ISSUER=Fast Vben Admin
MFA_TOTP_VALID_WINDOW=1

# Enterprise OIDC: keep disabled until the identity provider is configured.
ENTERPRISE_OIDC_ENABLED=false
ENTERPRISE_OIDC_ISSUER=
ENTERPRISE_OIDC_DISCOVERY_URL=
ENTERPRISE_OIDC_CLIENT_ID=
ENTERPRISE_OIDC_CLIENT_SECRET=
ENTERPRISE_OIDC_REDIRECT_URI=
ENTERPRISE_OIDC_FRONTEND_LOGIN_URL=
ENTERPRISE_OIDC_SCOPES=openid email profile
ENTERPRISE_OIDC_ROLE_CLAIM=groups
ENTERPRISE_OIDC_ROLE_MAPPING={}
ENTERPRISE_OIDC_ROLE_SYNC_MODE=disabled
ENTERPRISE_OIDC_ACTIVE_CLAIM=active
ENTERPRISE_OIDC_SYNC_ACTIVE_STATUS=false
ENTERPRISE_OIDC_REQUIRE_VERIFIED_EMAIL=true
ENTERPRISE_OIDC_STATE_TTL_SECONDS=300
ENTERPRISE_OIDC_TICKET_TTL_SECONDS=60
ENTERPRISE_OIDC_HTTP_TIMEOUT_SECONDS=5
METRICS_ENABLED=true
METRICS_AUTH_TOKEN=

UPLOAD_DIR=uploads
UPLOAD_MAX_SIZE_MB=10
UPLOAD_ALLOWED_EXTENSIONS=jpg,jpeg,png,gif,webp,pdf,doc,docx,xls,xlsx,csv,txt,zip

# File storage: local (default) or S3-compatible storage such as MinIO.
STORAGE_PROVIDER=local
S3_ENDPOINT_URL=http://minio:9000
S3_REGION=us-east-1
S3_BUCKET=fast-vben-admin
S3_ACCESS_KEY_ID=minioadmin
S3_SECRET_ACCESS_KEY=minioadmin
S3_OBJECT_PREFIX=uploads
S3_ADDRESSING_STYLE=path
S3_AUTO_CREATE_BUCKET=true
S3_PRESIGNED_URL_EXPIRE_SECONDS=300

SENTRY_DSN=