.env.example

# TicketPulse Environment Configuration
# Copy this file to .env and fill in your values.

# =============================================================================
# REQUIRED
# =============================================================================

# Google OAuth credentials for authentication
# Create at https://console.cloud.google.com/apis/credentials
GOOGLE_CLIENT_ID=your-google-client-id
GOOGLE_CLIENT_SECRET=your-google-client-secret

# Path to the SQLite database file
# In Docker, use /data/ticketpulse.db with a mounted volume
DB_FILEPATH=ticketpulse.db

# =============================================================================
# RECOMMENDED
# =============================================================================

# Base URL of the application (used for OAuth redirect and cookie security)
# Set to your actual domain in production, e.g. https://ticketpulse.internal.company.com
BASE_URL=http://localhost:8080

# Session encryption key (minimum 32 bytes, base64-encoded)
# Generate with: openssl rand -base64 32
# If not set, a random key is generated on each restart (sessions won't persist across restarts)
SESSION_KEY=

# =============================================================================
# OPTIONAL
# =============================================================================

# Environment: set to "production" to enforce security checks (SESSION_KEY required, etc.)
GO_ENV=

# Log format: "json" for structured JSON logs, otherwise plain text
LOG_FORMAT=

# Log file path: when set, logs are written to both stdout and this file (append mode)
# Leave empty to log only to stdout. Log rotation should be handled externally (e.g. logrotate).
LOG_FILE=

# Debug logging areas (comma-separated): zendesk, sla, cache, slack, db, or "all"
DEBUG_AREAS=

# Trusted proxy CIDRs for rate limiting (comma-separated)
# Only set if running behind a reverse proxy. Example: 10.0.0.0/8,172.16.0.0/12
TRUSTED_PROXY_CIDRS=