# Template for the app stack's .env. The workspace root's scripts/setup.sh copies
# this file to .env on first run and then keeps the shared keys in sync with the
# root .env. Secrets stay as `changethis` here and are generated locally.

# Domain Traefik routes on and acquires TLS certificates for.
DOMAIN=localhost

# Used by the backend to build links in outgoing emails.
FRONTEND_HOST=http://localhost:5173

# local, staging, production
ENVIRONMENT=local

# Baked into the SPA at build time: the address the interface calls. The
# workspace root's scripts/setup.sh derives it from DOMAIN and ENVIRONMENT —
# plain http for a local target, where nothing terminates TLS.
VITE_API_URL=http://api.localhost

PROJECT_NAME="Fluksio"
STACK_NAME=fluksio-app

# Backend
# `http://frontend` is the compose-network origin the Playwright job loads the
# SPA from (docker/compose.ci.yml); without it every spec fails CORS at login.
BACKEND_CORS_ORIGINS="http://localhost,http://localhost:5173,http://app.localhost,https://localhost,https://localhost:5173,http://frontend"
SECRET_KEY=changethis
FIRST_SUPERUSER=admin@fluksio.com
FIRST_SUPERUSER_PASSWORD=changethis

# Emails
SMTP_HOST=
SMTP_USER=
SMTP_PASSWORD=
EMAILS_FROM_EMAIL=info@fluksio.com
SMTP_TLS=True
SMTP_SSL=False
SMTP_PORT=587

# Where this installation keeps everything: the database, flows, secrets,
# artifacts and the user venv. The compose stack sets it to the /data volume.
DATA_DIR=flow-data
# Any SQLAlchemy URL. Empty means SQLite in the data directory, which is what
# the engine is designed around — one process owns this database.
DATABASE_URL=

# The Postgres the optional Umami analytics profile runs on. Nothing else uses
# it; `make umami` provisions a least-privilege role inside it.
POSTGRES_DB=app
POSTGRES_USER=postgres
POSTGRES_PASSWORD=changethis

# Redis — flow engine state. Empty keeps the state in memory; the compose stack
# points the backend at its own `redis` service.
REDIS_HOST=
REDIS_PORT=6379

SENTRY_DSN=

# Docker registry images
DOCKER_IMAGE_BACKEND=fluksio-backend
DOCKER_IMAGE_FRONTEND=fluksio-frontend

# The MCP endpoint agents connect to, and the OAuth server behind it.
MCP_ENABLED=true

# Local time for schedules; set from the root .env by scripts/setup.sh.
TZ=UTC