.env.example

# SQLite database file. For Docker use "file:/data/selfstack.db".
DATABASE_URL="file:./dev.db"

# Secret for signing session JWTs. Generate with:
#   node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
JWT_SECRET="change-this-to-a-random-secret-in-production"

# Set to "true" when serving over HTTPS so session cookies are marked Secure.
# SECURE_COOKIES="true"

# Public base URL of the app (used in outgoing emails for login links).
# Can also be managed at runtime via Admin -> System Settings.
APP_URL="http://localhost:3025"

# Hard-disable self-registration regardless of the admin UI toggle.
# When "true", the register page redirects, the login link is hidden,
# and the signup action is rejected server-side.
# DISABLE_REGISTRATION="true"

# ─── SMTP (outgoing email) ──────────────────────────────────────────────────
# Used for welcome emails and password reset links. If SMTP_USER/SMTP_PASS
# are unset, the transport connects anonymously (useful for local relays).
# SMTP_HOST="smtp.example.com"
# SMTP_PORT="587"
# SMTP_SECURE="false"
# SMTP_USER=""
# SMTP_PASS=""
# SMTP_FROM="Selfstack <noreply@selfstack.local>"

# ─── Demo mode ──────────────────────────────────────────────────────────────
# When enabled, the database is wiped + re-seeded with demo content on boot
# and every DEMO_RESET_MINUTES (default 60). All settings mutations are
# blocked server-side. Login: admin@selfstack.local / admin123.
# NEXT_PUBLIC_DEMO_MODE="true"
# DEMO_RESET_MINUTES="60"

# ─── Search engine indexing ─────────────────────────────────────────────────
# By default the app sends `noindex, nofollow` headers and /robots.txt
# disallows everything. Set this to "true" to allow crawlers to index the
# app (only makes sense for public-facing deployments).
# ALLOW_SEARCH_INDEXING="false"