# --- Redi configuration (spec Appendix A) ---
# App HTTP port.
PORT=3000
# Root of all state (db/, master.key, .env, logs). /data inside the Docker image.
DATA_DIR=./data
# embedded | remote. embedded = in-process MongrelDB; remote = connect to a mongreldb-server daemon.
DATABASE_MODE=embedded
# Embedded data directory (default: $DATA_DIR/db).
# MONGRELDB_PATH=./data/db
# Daemon URL when DATABASE_MODE=remote.
MONGRELDB_URL=http://127.0.0.1:8453
# DB catalog user + password + at-rest encryption passphrase.
# DO NOT SET BY HAND for normal runs: scripts/bootstrap-env.sh generates all three
# into $DATA_DIR/.env (mode 0600) on first boot (spec §4.6). Env vars override the file.
MONGRELDB_DB_USERNAME=redi
# MONGRELDB_DB_PASSWORD=
# MONGRELDB_PASSPHRASE=
# 32-byte secret-encryption key (hex or base64). If unset, generated once into <DATA_DIR>/master.key (mode 0600).
# REDI_MASTER_KEY=
# One-time claim token. Generated into DATA_DIR/.env on first boot.
# REDI_SETUP_TOKEN=
# Number of reverse proxies trusted to append X-Forwarded-For. Keep 0 without one.
TRUST_PROXY_HOPS=0
# Cookie HMAC key. If unset, derived from the master key.
# SESSION_SECRET=
# In-process scheduler on/off (set false when driving jobs via POST /api/cron/tick).
SCHEDULER_ENABLED=true
# Shared secret for POST /api/cron/tick (header X-Redi-Cron-Secret).
# CRON_SECRET=
# Log level: debug | info | warn | error.
LOG_LEVEL=info
# Default timezone fallback (the wizard auto-detects the real one).
# TZ=UTC