# =============================================================================
# Linkdock Environment Configuration
# =============================================================================
# Copy to .env and adjust:  cp .env.example .env

# --- Required ---
# 32-byte hex secret for session signing
# Generate with: openssl rand -hex 32
DOCK_SESSION_SECRET=

# --- Docker Compose ---
# Port to expose on the host (container always uses 3000 internally)
DOCK_PORT=3000

# Domain name (only needed if using Caddy reverse proxy profile)
DOCK_DOMAIN=bookmarks.example.com

# --- Security ---
# Set to false if not behind HTTPS reverse proxy
DOCK_COOKIE_SECURE=true

# Optional but strongly recommended on public fresh installs. The first account
# must provide this value and becomes the system administrator.
DOCK_SETUP_TOKEN=

# Exact allowed CORS origins, comma-separated (empty = deny cross-origin).
# Set DOCK_PUBLIC_URL to the browser-facing URL, including HTTPS behind a proxy.
DOCK_CORS_ORIGINS=
DOCK_PUBLIC_URL=http://localhost:3000

# Passkeys: set these to the exact public HTTPS host/origin in production.
# For https://sina.dev use RP_ID=sina.dev and ORIGIN=https://sina.dev.
DOCK_WEBAUTHN_RP_ID=localhost
DOCK_WEBAUTHN_ORIGIN=http://localhost:3000
DOCK_WEBAUTHN_RP_NAME=Linkdock

# --- Logging ---
# Log format: "json" or "text" (default)
DOCK_LOG_FORMAT=json

# Log level filter
RUST_LOG=info,linkdock=debug

# --- Advanced (usually no change needed) ---
# DOCK_LISTEN=0.0.0.0:3000
# DOCK_DATA_DIR=/data
# DOCK_DATABASE_URL=sqlite:///data/linkdock.sqlite3?mode=rwc