# Copy this file to .env and fill it in. Sandbar reads .env from its working directory
# (or pass -env /path/to/file). Real environment variables always win over the file.
# Never commit .env.

# Encrypts saved secrets (channel webhook URLs and email addresses) inside the database.
# Generate one with:  sandbar -genkey
# Keep it apart from the data folder and back it up: without it those secrets cannot be read.
# If you leave it unset, a key is generated into <data>/master.key instead.
SANDBAR_MASTER_KEY=

# Creates the first administrator at startup (otherwise use the setup page in the browser).
#SANDBAR_ADMIN_EMAIL=you@example.com
#SANDBAR_ADMIN_PASSWORD=

# Address to listen on, and the folder for the database.
#SANDBAR_LISTEN=:8090
#SANDBAR_DATA=./sandbar-data

# Public address people use to reach Sandbar. Links in notifications use it.
#SANDBAR_URL=https://sandbar.example.com

# Serves Prometheus metrics at /metrics for a scraper that sends this as a bearer token.
# Leave empty and /metrics does not exist.
#SANDBAR_METRICS_TOKEN=

# Install new releases by itself: checks every few hours, then downloads, verifies and restarts.
# Works in Docker too (the new binary is kept in <data>/bin). Off by default.
#SANDBAR_AUTO_UPDATE=1
# Where releases come from, if not this project on git.veillax.com.
#SANDBAR_UPDATE_SERVER=https://git.veillax.com
#SANDBAR_UPDATE_REPO=Veillax/sandbar

# Behind a reverse proxy, take the client address from X-Forwarded-For. Needed for website analytics and
# the sign-in limit to tell visitors apart. Only set it when the proxy is the only way to reach Sandbar.
#SANDBAR_TRUST_PROXY=1

# How long topic messages and monitor results are kept, in days.
#SANDBAR_MESSAGE_DAYS=30
#SANDBAR_CHECK_DAYS=30
#SANDBAR_ANALYTICS_DAYS=365

# Outgoing email, for email channels and for paging people by email.
#SANDBAR_SMTP_HOST=smtp.example.com
#SANDBAR_SMTP_PORT=587
#SANDBAR_SMTP_USER=
#SANDBAR_SMTP_PASSWORD=
#SANDBAR_SMTP_FROM=sandbar@example.com

# Mobile companion app (the sandbar-mobile PWA): Web Push, served from Sandbar or from another site.
# Folder holding the app's files; Sandbar serves them at /app/. Needs HTTPS (or localhost) for push.
#SANDBAR_APP_DIR=../sandbar-mobile/public
# If the app is hosted on another origin instead, allow it to call the API.
#SANDBAR_APP_ORIGIN=https://sandbar-app.example.com
# Contact that push services (Google, Apple, Mozilla) can reach if Sandbar misbehaves. Defaults to SANDBAR_URL when that is https.
#SANDBAR_VAPID_SUBJECT=mailto:you@example.com
# Development only: allow push endpoints on plain http and private addresses.
#SANDBAR_PUSH_DEV=1
# Show Hammerhead's edges and tunnel state in the app. Use an account without two-factor sign-in, read-only if you can.
#SANDBAR_HAMMERHEAD_URL=https://hammerhead.example.com
#SANDBAR_HAMMERHEAD_EMAIL=
#SANDBAR_HAMMERHEAD_PASSWORD=