# Base64-encoded 32-byte key. Generate with: openssl rand -base64 32
# Required: the app refuses to boot without it.
# This key also encrypts the MongrelDB Kit database at rest and stored
# credentials (SMTP passwords, tile API keys, etc.). Keep it secret and stable;
# losing it renders the database permanently unreadable.
ROAMARR_SECRET=
# MongrelDB Kit data directory or file path.
DATABASE_PATH=./roamarr-db
# Optional MongrelDB authentication. Set both or neither. On first creation,
# this user is the database administrator. Keep these values stable.
DATABASE_USER=
DATABASE_PASS=
# Optional attachments directory. Defaults to <DATABASE_PATH>/attachments.
ATTACHMENTS_PATH=
# Optional cache for local MiniLM ONNX models (semantic search). Defaults to a
# sibling of DATABASE_PATH named roamarr-models/. Only used when an admin enables
# semantic search under Configuration.
EMBEDDINGS_CACHE_PATH=
PORT=3000
# Public origin for cookies/redirects behind proxies. WebAuthn/passkeys require
# this to be set to the HTTPS origin users see.
ORIGIN=https://roamarr.example.com
# NOTE: SMTP, IMAP, email parsing, maps, webhooks, and MCP policy are configured
# in the Roamarr UI after /setup. Administrators use Configuration; users use
# Profile → Email Settings for personal mail settings when policy allows them.