.env.example

# OpenBlog environment configuration
#
# Compose reads this file (or `.env`) from the project root automatically.
# The required vars are `AUTH_SECRET` and `BASE_URL`. The optional vars
# below cover port mapping, image pinning, and feature toggles.
#
# All other config (NODE_ENV, DATABASE_URL, etc.) is baked into the
# compose files. You only need this file.

# ─── Required ─────────────────────────────────────────────────────────────────
# BetterAuth signing secret. Generate with `openssl rand -base64 32`.
# Inject at container start; never bake into a Docker image.
AUTH_SECRET="your-auth-secret-here"

# Public-facing URL the app is served from. Used by BetterAuth's trusted
# origins and the sitemap. Set to the URL you actually reach the app from.
#   - Local dev (default compose ports): http://localhost:3000
#   - Behind a reverse proxy:           https://blog.example.com
BASE_URL="http://localhost:3000"

# ─── Optional: port mapping ───────────────────────────────────────────────────
# Override if 3000 or 5432 is already in use on your host.
APP_HOST_PORT=3000
POSTGRES_HOST_PORT=5432

# ─── Optional: image ─────────────────────────────────────────────────────────
# Pulled from GHCR by default. Pin to a version for production.
OPENBLOG_IMAGE=ghcr.io/iamcoder18/openblog:latest

# ─── Optional: app config ────────────────────────────────────────────────────
# Display name shown in titles, nav, footer, RSS feed metadata.
BLOG_NAME="OpenBlog"

# Set to "true" to expose /auth/signup publicly. Default "false".
SIGN_UP_ENABLED=false

# ─── Local dev only (not used by docker-compose) ─────────────────────────────
# Port the Next.js dev server binds to. Hardcoded to 4000 by `pnpm dev` in
# package.json5 — change there, not here.
PORT=4000

# Node environment. Use "development" for `pnpm dev`, "production" otherwise.
NODE_ENV="development"

# Disables BetterAuth rate limiting. Used by E2E tests; do not enable in prod.
DISABLE_RATE_LIMITING="false"