# Used by docker-compose.yml. All other settings are managed via /admin.
JWT_SECRET=change-this-to-a-secure-random-string-with-at-least-32-characters
POSTGRES_PASSWORD=change-this-to-a-secure-random-password

# Pin the backend image to a specific released version (e.g. 1.2.0) for
# deliberate, reviewed updates. Leave unset to track the rolling `latest` tag.
# FAMLIN_VERSION=latest

# Set to true only if famlin-backend sits behind a reverse proxy that sets
# (and overwrites, never merely appends) X-Forwarded-Proto/X-Forwarded-Host —
# e.g. nginx/Caddy/Traefik in front of it. Leave false for a direct/no-proxy
# deployment, otherwise a client could spoof its own origin.
TRUST_PROXY=false