# HitKeep environment for examples/compose.yml.
# Copy to .env next to compose.yml and fill in your values.
# This is a plain KEY=value file: no shell commands, no quotes needed.

# Required. Paste a generated 64-character hex string.
# Generate with: openssl rand -hex 32
HITKEEP_JWT_SECRET=paste-the-generated-value-here

# Required. The exact URL you open in the browser. Behind a reverse proxy
# this is your public domain, e.g. https://analytics.example.com
HITKEEP_PUBLIC_URL=http://localhost:8080

# Behind a reverse proxy: the proxy network CIDR, e.g. 172.16.0.0/12 for a
# host proxy reaching the container through the Docker network gateway.
# See https://hitkeep.com/guides/installation/trusted-proxies/
HITKEEP_TRUSTED_PROXIES=

# Optional SMTP. Powers invites, password resets, and email reports.
# Leave the values empty to run without outbound mail.
HITKEEP_MAIL_HOST=
HITKEEP_MAIL_PORT=587
HITKEEP_MAIL_USERNAME=
HITKEEP_MAIL_PASSWORD=
HITKEEP_MAIL_FROM_ADDRESS=hitkeep@localhost
HITKEEP_MAIL_FROM_NAME=HitKeep

# Optional social sign-in. Each provider is visible only when both values are
# set. Callback URLs derive from HITKEEP_PUBLIC_URL; use separate registrations
# and credentials for each managed EU or US deployment.
HITKEEP_SOCIAL_GOOGLE_CLIENT_ID=
HITKEEP_SOCIAL_GOOGLE_CLIENT_SECRET=
HITKEEP_SOCIAL_GITHUB_CLIENT_ID=
HITKEEP_SOCIAL_GITHUB_CLIENT_SECRET=
HITKEEP_SOCIAL_MICROSOFT_CLIENT_ID=
HITKEEP_SOCIAL_MICROSOFT_CLIENT_SECRET=
HITKEEP_SOCIAL_MICROSOFT_TENANT=common
HITKEEP_SOCIAL_SIGNUP_ENABLED=false