.env.example

AWS_REGION=us-east-1
PUBLIC_BASE_URL=http://localhost:3000
DEFAULT_FROM_EMAIL=newsletter@example.com
DATABASE_URL=sqlite:///db.sqlite3
DEBUG=True
SECRET_KEY=
ALLOWED_HOSTS=localhost,127.0.0.1
CSRF_TRUSTED_ORIGINS=
EMAIL_BACKEND=django.core.mail.backends.console.EmailBackend
AWS_SES_CONFIGURATION_SET=
AWS_ENDPOINT_URL=
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
SQS_TRANSACTIONAL_EMAIL_QUEUE_URL=
SQS_CAMPAIGN_EMAIL_QUEUE_URL=
SQS_EMAIL_EVENTS_QUEUE_URL=
SQS_SES_WEBHOOKS_QUEUE_URL=
TRANSACTIONAL_EMAIL_QUEUE_NAME=transactional-email
CAMPAIGN_EMAIL_QUEUE_NAME=campaign-email
SES_WEBHOOKS_QUEUE_NAME=ses-webhooks
EMAIL_EVENTS_QUEUE_NAME=email-events

# Mock inbox (test-only): capture transactional emails to test addresses instead
# of delivering them, and expose them via /api/mock-inbox/messages for e2e tests.
# Defaults on when DEBUG/TESTING; set explicitly on shared deployments.
MOCK_INBOX_ENABLED=
MOCK_INBOX_DOMAIN=mailbox.test
MOCK_INBOX_PLUS_TAG=e2e

# Real inbox (option B): unlike the mock inbox, addresses on REAL_INBOX_DOMAIN take
# the REAL SES send path and are received back from the inbound S3 bucket that the
# SES receipt rule writes to. This proves an email was actually sent and received.
# Read API: GET/DELETE /api/inbox/messages?address=...  (gated by REAL_INBOX_ENABLED).
# Sending is always real for REAL_INBOX_DOMAIN, independent of REAL_INBOX_ENABLED.
REAL_INBOX_ENABLED=
REAL_INBOX_DOMAIN=mailer.dtcdev.click
REAL_INBOX_S3_BUCKET=
REAL_INBOX_S3_PREFIX=raw/
REAL_INBOX_MAX_SCAN_OBJECTS=200

# --- Deployed hosts only ---------------------------------------------------
# deploy/docker-compose.yml reads this same .env, both for the containers'
# environment and for the ${...} interpolation below. Leave this block empty
# for local development; SITE_ADDRESS and POSTGRES_PASSWORD are the two that
# compose refuses to start without.

# Hostname Caddy requests a Let's Encrypt certificate for.
SITE_ADDRESS=
# Consumed by the db service and by DATABASE_URL, which points at it, e.g.
# postgresql://relay:<password>@db:5432/relay
POSTGRES_DB=relay
POSTGRES_USER=relay
POSTGRES_PASSWORD=
# Bearer token for the taskdeck status contract at /internal/ops/status.
TASKDECK_STATUS_TOKEN=

# Inbound mail. The drains that read these run under the `ingress` compose
# profile and stay stopped until the queue URLs are set.
SQS_INBOUND_EMAIL_QUEUE_URL=
INBOUND_EMAIL_EVENTS_TOPIC_ARN=
INBOUND_EMAIL_IDEMPOTENCY_TABLE=
INBOUND_EMAIL_ARTIFACT_PREFIX=processed/
INBOUND_EMAIL_ROUTES=