.env.docker.example

# Copy this file to .env.docker and fill in the blanks before running
# `make docker-up`. See README.md for the full env var reference.

ENV=development
PORT=4000

# Postgres / PgBouncer. The app reads DATABASE_CONNECTION_POOL_URL; only
# migrations and psql shells use DATABASE_URL. Do NOT add a query string
# (e.g. ?sslmode=disable) to DATABASE_CONNECTION_POOL_URL — cmdutil
# appends ?pool_max_conns=... unconditionally and a second `?` makes pgx
# reject the URL.
DATABASE_URL=postgres://apollo:apollo@postgres:5432/apollo?sslmode=disable
DATABASE_CONNECTION_POOL_URL=postgres://apollo:apollo@pgbouncer:6432/apollo

# Two Redis instances on purpose: rmq queues vs Lua-script dedup locks.
REDIS_URL=redis://redis-queue:6379/0
REDIS_QUEUE_URL=redis://redis-queue:6379/0
REDIS_LOCKS_URL=redis://redis-locks:6379/0

# APNs auth. The api and worker processes call panic() if the key file
# is missing — drop your .p8 at ./secrets/apple.p8 before starting.
# APPLE_APNS_TOPIC is the bundle ID of your sideloaded Apollo build
# (e.g. com.foo.Apollo); it's used as the apns-topic on every push and
# is required.
APPLE_KEY_ID=
APPLE_KEY_PATH=/etc/secrets/apple.p8
APPLE_TEAM_ID=
APPLE_APNS_TOPIC=com.christianselig.Apollo
# Force the APNs gateway: 'true' for sandbox (api.sandbox.push.apple.com,
# correct for sideloaded builds signed under a dev cert), unset/empty to
# trust whatever the iOS app sends. Apollo's binary sends sandbox=false
# (it was built for the App Store), so sideloaders typically set this.
APPLE_APNS_SANDBOX=true

# Optional: gate the registration endpoints behind a shared secret. If
# set, the tweak must send `X-Registration-Token: <value>`. Leave empty
# for open registration (local dev / private-network deployments).
REGISTRATION_SECRET=

# Optional: statsd metrics sink. When empty, metrics no-op. The compose
# stack runs a socat-based no-op UDP sink, so the default below is safe
# even without an external collector.
STATSD_URL=statsd:8125

# Silence the Honeycomb launcher's OTLP exporter when there's no
# HONEYCOMB_API_KEY set. Otherwise it tries localhost:4317 every few
# seconds and floods the logs with connection-refused errors.
OTEL_TRACES_EXPORTER=none
OTEL_METRICS_EXPORTER=none

REDDIT_CLIENT_ID=
REDDIT_CLIENT_SECRET=
REDDIT_REDIRECT_URI=apollo://reddit-oauth
REDDIT_USER_AGENT=ios:com.yourbundle.id:v1.0 (by /u/yourusername)