# Copy to .env next to docker-compose.selfhost.yml.
# Docs: https://doska.sh/docs/self-hosting

# ---- Required -----------------------------------------------------------------

# Sign-in credentials for the web UI and desktop sync.
AUTH_LOGIN=admin
AUTH_PASSWORD=change-me

# Signs session tokens. Generate with: openssl rand -hex 32
AUTH_SECRET=

# Public origin of this server, no trailing slash.
# e.g. http://192.168.1.10:8080 or https://doska.example.com
BASE_URL=

# ---- Network ------------------------------------------------------------------

# Host port for the web UI.
WEB_PORT=8080

# Automatic HTTPS via Caddy (Let's Encrypt). Point DNS at this host, set
# BASE_URL=https://<DOMAIN> above, then start with `--profile https`.
# DOMAIN=doska.example.com

# ---- Single sign-on (optional) ------------------------------------------------
# Any OpenID Connect provider (Authentik, Keycloak, Pocket ID, Google).
# Register a web app with redirect URI $BASE_URL/api/auth/oauth2/callback/oidc
# and scopes openid, profile, email. Setting OIDC_ISSUER turns SSO on.
# Docs: https://doska.sh/docs/user-guides/sso

# OIDC_ISSUER=https://auth.example.com
# OIDC_CLIENT_ID=
# OIDC_CLIENT_SECRET=
# Label on the sign-in button: "Continue with <OIDC_NAME>". Default: SSO
# OIDC_NAME=
# Set to off to stop SSO sign-ins from creating new accounts. Default: on
# OIDC_AUTO_CREATE=on

# ---- Database -----------------------------------------------------------------

# Password for the bundled Postgres (data lives in a Docker volume).
POSTGRES_PASSWORD=change-me

# Use your own Postgres instead. The bundled one is then ignored.
# DATABASE_URL=postgres://user:password@db-host:5432/doska

# ---- Attachments (optional) ---------------------------------------------------
# Stored on a Docker volume by default. Set S3_BUCKET to store them in S3
# instead. The bucket stays private: the server proxies uploads and downloads.

# S3_BUCKET=my-doska-attachments
# S3_REGION=us-east-1
# Needs s3:PutObject, s3:GetObject, s3:DeleteObject.
# AWS_ACCESS_KEY_ID=
# AWS_SECRET_ACCESS_KEY=
# For S3-compatible stores (MinIO, Cloudflare R2).
# S3_ENDPOINT=https://<accountid>.r2.cloudflarestorage.com

# Max upload size in bytes. Default: 25 MiB
# FILE_MAX_BYTES=26214400

# ---- Updates ------------------------------------------------------------------

# Image tag to pull: latest (stable), beta (prereleases), or a pinned version
# like 0.4.0. The desktop app follows whatever the server runs.
# DOCKER_IMAGE_TAG=latest