.env.example

# Production deployment with Caddy TLS termination.
# Copy to .env.production and adjust the values for your domain and mail provider.

CADDY_SITE_ADDRESS=scamscreener.creepans.net

TRAINING_HUB_ENV=test
TRAINING_HUB_PUBLIC_BASE_URL=https://scamscreener.creepans.net
TRAINING_HUB_ENFORCE_HTTPS=true
# Keep 127.0.0.1 for the internal healthcheck. Docker Compose appends the internal Caddy IP automatically.
TRAINING_HUB_TRUSTED_PROXIES=127.0.0.1
TRAINING_HUB_ADMIN_MFA_REQUIRED=true
TRAINING_HUB_PASSWORD_RESET_SEND_EMAIL=true
TRAINING_HUB_SESSION_BIND_USER_AGENT=true
TRAINING_HUB_RETENTION_AUTO_ENABLED=true
TRAINING_HUB_API_DOCS_ENABLED=false

# Optional override. If omitted, the container generates and persists a strong secret in /app/data/runtime.
# TRAINING_HUB_SECRET_KEY=

# Optional override. If omitted, the first admin username defaults to "admin".
# TRAINING_HUB_ADMIN_USERNAMES=admin

TRAINING_HUB_SMTP_HOST=smtp.example.com
TRAINING_HUB_SMTP_PORT=587
TRAINING_HUB_SMTP_USERNAME=change-me
TRAINING_HUB_SMTP_PASSWORD=change-me
TRAINING_HUB_SMTP_FROM_EMAIL=no-reply@scamscreener.creepans.net
TRAINING_HUB_SMTP_USE_STARTTLS=true
TRAINING_HUB_SMTP_USE_TLS=false

# Public legal/privacy pages. Review these carefully before operating a public site.
TRAINING_HUB_SITE_PROJECT_CLASSIFICATION=Private non-commercial community project
TRAINING_HUB_SITE_OPERATOR_NAME=
TRAINING_HUB_SITE_POSTAL_ADDRESS=
TRAINING_HUB_SITE_CONTACT_CHANNEL=
TRAINING_HUB_SITE_PRIVACY_CONTACT=
TRAINING_HUB_SITE_HOSTING_LOCATION=Ashburn, Virginia, USA

MARKETGUARD_CACHE_TTL_SECONDS=60
MARKETGUARD_STALE_IF_ERROR_SECONDS=300
MARKETGUARD_LOWESTBIN_RATE_LIMIT_PER_MINUTE=30
MARKETGUARD_API_DOCS_ENABLED=false