.env.example

# Copy this file to .env and fill in the values
# NEVER commit .env to version control
#
# Production note: the API refuses to start with any of the placeholder values below
# when ASPNETCORE_ENVIRONMENT is not "Development". Replace every REPLACE_ME marker.

# PostgreSQL password (used by postgres + backend in Docker).
# Must match appsettings.Development.json when running the API locally against Docker Postgres.
POSTGRES_PASSWORD=REPLACE_ME_postgres_password

# JWT signing key — must be at least 32 characters and unique per environment.
# Generate one with:  openssl rand -base64 48
JWT_SIGNING_KEY=REPLACE_ME_with_a_unique_secret_of_32_or_more_characters

# Token lifetime in minutes. Default 20160 (2 weeks). Tokens cannot be revoked server-side;
# admin demotions, user deletions, and password changes take effect on expiry.
JWT_EXPIRATION_MINUTES=20160

# Integration API key for POST /api/integrations/groups/{id}/messages (min 8 chars).
# Treat it like a password. Rotate periodically.
INTEGRATION_API_KEY=REPLACE_ME_integration_api_key

# Web Push (VAPID) — generate with: npx web-push generate-vapid-keys
WebPush__Subject=mailto:dev@localhost
WebPush__PublicKey=
WebPush__PrivateKey=