.env.example

# ─────────────────────────── Fox self-host config ───────────────────────────
# Optional — used by docker-compose.app.yml. Plain `docker run` needs no .env.

# Host port to publish the app on (pick anything free — this is what you open in
# the browser). Container-internal port is API_PORT below; they can differ.
PORT=3001
API_PORT=3001

# Optional. 32-byte key that encrypts saved database passwords at rest.
# Leave empty for Docker pull-and-run: the entrypoint auto-generates one into
# /data/.app_encryption_key on first boot. To pin your own key:
#   openssl rand -hex 32
# Keep it STABLE across restarts — change it and existing saved passwords can no
# longer be decrypted. Store it as a secret; never commit your real .env.
APP_ENCRYPTION_KEY=

# ── App metadata store ──
# The app's OWN small database (saved connections, migration history, settings) —
# NOT the databases you connect to and compare.
# Default: a SQLite file on the mounted /data volume (persists across restarts).
APP_DB_ENGINE=sqlite
APP_DB_PATH=/data/foxschema.db
APP_KEY_SCHEME=v1
#
# For a stateless container (e.g. serverless with ephemeral disk), point it at a
# managed Postgres or MySQL instead and drop the volume:
#   APP_DB_ENGINE=postgres
#   APP_DB_URL=postgresql://user:pass@host:5432/foxmeta
#   APP_DB_ENGINE=mysql
#   APP_DB_URL=mysql://user:pass@host:3306/foxmeta

# ── Access mode ──
# Default is OPEN single-user (no login). Only safe behind your own reverse
# proxy / VPN — do NOT expose this mode raw to the public internet.
LOCAL_SINGLE_USER=true
AUTH_REQUIRED=false
#
# For a public deployment, enable multi-user accounts + SSO (see docs/DEPLOYMENT.md):
#   LOCAL_SINGLE_USER=false
#   AUTH_REQUIRED=true
#   SSO_REDIRECT_BASE=https://fox.example.com
#   SSO_GOOGLE_CLIENT_ID=
#   SSO_GOOGLE_CLIENT_SECRET=
#   SSO_GITHUB_CLIENT_ID=
#   SSO_GITHUB_CLIENT_SECRET=
#   SSO_MICROSOFT_CLIENT_ID=
#   SSO_MICROSOFT_CLIENT_SECRET=
#   SSO_MICROSOFT_TENANT=common

# ── First-run signup wizard (optional) ──
# On first open, the app offers a skippable "stay in the loop" email prompt.
# Left unset, the wizard still shows but any submission just dismisses itself
# without being sent anywhere (fine for local dev). foxschema.com's own build
# points this at its WordPress signup webhook.
# SIGNUP_WEBHOOK_URL=https://foxschema.com/wp-json/foxschema/v1/signup
# SIGNUP_WEBHOOK_SECRET=