.env.example

DEBUG=false
HOST=0.0.0.0
PORT=8080
API_PREFIX=/v1
CORS_ORIGINS=["http://localhost:3000"]
SECRET_KEY=
ALGORITHM=HS256
ACCESS_TOKEN_EXPIRE_MINUTES=60
REFRESH_TOKEN_EXPIRE_DAYS=30
RATE_LIMIT_AUTH=5
RATE_LIMIT_GENERAL=100
RATE_LIMIT_UPLOAD=10
RATE_LIMIT_BATCH=20

# Public server URL used in OAuth callbacks and email links.
# Local desktop testing: http://localhost:8080
# Mobile/device or real Google testing: use a public HTTPS URL or tunnel.
PUBLIC_BASE_URL=http://localhost:8080

# Google OAuth web-application credentials.
# Authorized redirect URI should be:
#   <PUBLIC_BASE_URL>/v1/auth/oauth/google/callback
GOOGLE_OAUTH_CLIENT_ID=
GOOGLE_OAUTH_CLIENT_SECRET=
OAUTH_STATE_EXPIRE_MINUTES=10
AUTH_EXCHANGE_CODE_EXPIRE_MINUTES=5
EMAIL_VERIFICATION_TOKEN_EXPIRE_MINUTES=1440
PASSWORD_RESET_TOKEN_EXPIRE_MINUTES=60

# Local Mailpit defaults when running the API on the host machine.
# If the API itself runs in Docker, use SMTP_HOST=mailpit instead.
EMAIL_DELIVERY_ENABLED=true
SMTP_HOST=127.0.0.1
SMTP_PORT=1025
SMTP_USERNAME=
SMTP_PASSWORD=
SMTP_USE_TLS=false
SMTP_USE_SSL=false
SMTP_FROM_EMAIL=noreply@papyrus.local
SMTP_FROM_NAME=Papyrus

# Dev page frontend assets. In debug mode the backend falls back to Vite when
# no build manifest exists, but setting this explicitly is the easiest local setup.
DEV_PAGES_USE_VITE=true
DEV_PAGES_VITE_URL=http://localhost:5173
DEV_PAGES_MANIFEST_PATH=frontend/dev-pages/dist/.vite/manifest.json

# Prefer file-based PowerSync keys for local development.
# Generate them with: ./scripts/generate_dev_powersync_keys.sh
POWERSYNC_JWT_PRIVATE_KEY_FILE=.local/powersync/private.pem
POWERSYNC_JWT_PUBLIC_KEY_FILE=.local/powersync/public.pem

# Inline PEM values are still supported if you need them.
POWERSYNC_JWT_PRIVATE_KEY=
POWERSYNC_JWT_PUBLIC_KEY=
POWERSYNC_JWT_KEY_ID=papyrus-powersync-dev
POWERSYNC_JWT_AUDIENCE=powersync-dev
POWERSYNC_TOKEN_EXPIRE_MINUTES=5
POWERSYNC_SERVICE_URL=http://localhost:8081
POWERSYNC_SERVICE_PORT=8081
POWERSYNC_JWKS_URI=http://host.docker.internal:8080/v1/auth/jwks
POWERSYNC_SOURCE_ROLE=powersync_role
POWERSYNC_SOURCE_PASSWORD=powersync_dev_password
POWERSYNC_STORAGE_DB=powersync_storage
POWERSYNC_STORAGE_USER=powersync_storage_user
POWERSYNC_STORAGE_PASSWORD=powersync_storage_password
POSTGRES_USER=papyrus
POSTGRES_PASSWORD=papyrus
POSTGRES_HOST=127.0.0.1
POSTGRES_PORT=5432
POSTGRES_DB=papyrus