env.example

############################
# Ideon Environment Template
############################

### App
# Host port to expose the app (container listens on 3000)
APP_PORT=3000
# Public base URL of the app (used for invitations and SSO auth)
APP_URL=http://localhost:3000
# Canonical timezone for server logs ONLY
TIMEZONE=UTC

### Database
# Note: PostgreSQL variables are not required in "development" mode, SQLite is used automatically (storage/dev.db).
# Override SQLite path (optional)
SQLITE_PATH=./storage/dev.db

# PostgreSQL host or service name (Docker Compose: ideon-db)
DB_HOST=ideon-db
# PostgreSQL port (default 5432)
DB_PORT=5432
# PostgreSQL database name
DB_NAME=ideon
# PostgreSQL username
DB_USER=ideon
# PostgreSQL password
DB_PASS=ideon

### Security
# Primary master key used to derive security secrets.
# USAGE:
# - Signs user session JWTs.
# - Authenticates internal API bypass requests.
# - Derives data encryption keys (if used, data becomes unreadable on rotation).
#
# ROTATION IMPACT: High. Will invalidate all active sessions immediately.
# Use a strong, random string (e.g., openssl rand -hex 32)
SECRET_KEY=

### SMTP
# Sender email address
SMTP_FROM_EMAIL=
# Sender display name
SMTP_FROM_NAME=
# SMTP host
SMTP_HOST=
# SMTP user
SMTP_USER=
# SMTP password
SMTP_PASSWORD=
# SMTP port (e.g., 587 for STARTTLS)
SMTP_PORT=
# Use TLS (true/false)
SMTP_USE_TLS=true

### Git Integration
# Comma-separated list of allowed internal hosts for Git stats fetching (bypasses SSRF protection)
# Example: gitlab.internal,10.0.0.5
GIT_ALLOWED_HOSTS=

### Shell Block
# Maximum concurrent shell sessions per project (default: 2)
SHELL_MAX_SESSIONS=2