example.env

# Server Configuration
# APP_MODE: 'development' or 'production' (production enforces HTTPS)
APP_MODE=development
HOST=127.0.0.1
PORT=8080
LOG_LEVEL=info

# TLS/HTTPS Configuration (required in production unless ALLOW_INSECURE_SERVER=true)
TLS_CERT_FILE=
TLS_KEY_FILE=

# Security Overrides (use with caution in production)
ALLOW_INSECURE_SERVER=false
ALLOW_INSECURE_EXTERNAL=false

# Database Configuration
SQLITE_DB_PATH=./data/shortmesh.db
# Set to 'true' to enable SQLCipher encryption
DISABLE_DB_ENCRYPTION=false

# Migration Settings
# WARNING: Set to 'false' in production, run migrations manually with 'make migrate-up'
AUTO_MIGRATE=true

# Cryptographic Keys (auto-generated by 'make setup')
# IMPORTANT: Do not change these after initial setup - will invalidate existing data
# Generate with: openssl rand -base64 32
HASH_KEY=
# Generate with: openssl rand -hex 32 (required when DISABLE_DB_ENCRYPTION=false)
DB_ENCRYPTION_KEY=

# API Authentication (auto-generated by 'make setup')
# Client credentials for API access
CLIENT_ID=
CLIENT_SECRET=

# External Services
MAS_URL=
MAS_ADMIN_URL=
ADMIN_CLIENT_ID=
ADMIN_CLIENT_SECRET=
MATRIX_CLIENT_URL=

# RabbitMQ Configuration
RABBITMQ_URL=amqp://guest:guest@localhost:5672/