.env.example

# ── Database ──────────────────────────────────────────────────────────────────
TYPEORM_DB=./data/simonapi.sqlite   # SQLite path (dev) or ignored when Postgres env set

# ── Signpack ──────────────────────────────────────────────────────────────────
DATA_DIR=/data                      # Host path mounted into container (see docker-compose.yml)
FILE_MAX_BYTES=26214400             # 25 MB default
PURGE_CRON="0 * * * *"             # hourly purge of expired signpacks

# ── Admin ─────────────────────────────────────────────────────────────────────
# Static key protecting /admin/stats and /admin/usage.
# Must be long and random — e.g.: openssl rand -hex 32
# Send as:  x-api-key: <value>   when calling admin endpoints.
ADMIN_KEY=changeme-generate-with-openssl-rand-hex-32

# ── Visitor stats ─────────────────────────────────────────────────────────────
# Secret used to salt the daily IP hash (SHA-256(ip|YYYY-MM-DD|secret)).
# Changing this key invalidates all existing ip_hash values in visitor_daily
# (old rows become unrelatable — fine, they remain as aggregate counts).
# Generate: openssl rand -hex 32
IP_HASH_SECRET=changeme-generate-with-openssl-rand-hex-32