.env.example

# .env.example — reference file. To bootstrap:
#
#   make init     # creates .env and fills random DB passwords (idempotent)
#
# `make init` never overwrites existing values, so it's safe to re-run.
#
# NOTE: unlike a Laravel app, GLPI has no APP_KEY in .env — its encryption key
# (glpicrypt.key) is generated automatically by `database:install` on first
# boot and persisted in the `glpi-config` volume. Never delete that volume;
# back it up (the nightly phpbu job archives the config dir for this reason).

# -----------------------------------------------------------------------
# Image
# -----------------------------------------------------------------------
GLPI_IMAGE_TAG=latest

# -----------------------------------------------------------------------
# Timezone
# -----------------------------------------------------------------------
# Sets the OS clock inside the containers (log + cron timestamps). GLPI's own
# display timezone is set in the UI under Setup > General.
TZ=Europe/Berlin

# -----------------------------------------------------------------------
# Database  (passwords filled by `make init`)
# -----------------------------------------------------------------------
GLPI_DB_NAME=glpi
GLPI_DB_USER=glpi
GLPI_DB_PASSWORD=
DB_ROOT_PASSWORD=

# -----------------------------------------------------------------------
# Cache — Valkey (Linux Foundation Redis fork; speaks RESP, so redis:// works)
# -----------------------------------------------------------------------
# Put any auth in the DSN itself (redis://:pw@valkey:6379) AND add
# --requirepass to the valkey command in compose.yml. The bundled valkey has
# no password (reachable only on the internal network).
GLPI_CACHE_DSN=redis://valkey:6379

# -----------------------------------------------------------------------
# GLPI runtime
# -----------------------------------------------------------------------
# production | development | testing  (production hides stack traces + toolbar)
GLPI_ENVIRONMENT_TYPE=production
# First boot installs the schema (database:install); later boots upgrade it
# (database:update). Set false to manage install/upgrade by hand.
GLPI_AUTOINSTALL=true
# Skip the on-boot database:update — for multi-replica setups where you run
# the upgrade once, out of band.
SKIP_DB_UPDATE=false
# Language used for the initial install.
GLPI_DEFAULT_LANGUAGE=en_GB

# -----------------------------------------------------------------------
# Networking
# -----------------------------------------------------------------------
# Loopback-published host port for the nginx `web` service. Front with a
# reverse proxy (examples/compose.traefik.yml) for public exposure.
GLPI_HTTP_PORT=8080

# Public hostname — used by examples/compose.traefik.yml and compose.caddy.yml.
GLPI_HOST=glpi.example.com

# -----------------------------------------------------------------------
# Backup (opt-in: `--profile backup`)
# -----------------------------------------------------------------------
# Passphrase for at-rest encryption of every backup archive (phpbu openssl,
# aes-256-cbc + pbkdf2). `make init` fills a random 32-char value. REQUIRED
# once you enable the backup profile — an empty value makes the backup fail.
#
# ⚠  STORE THIS SEPARATELY (password manager / secrets vault). It is NOT kept in
#    the backups volume; without it every encrypted archive is unrecoverable.
#    Decrypt:  openssl enc -d -a -aes-256-cbc -pbkdf2 \
#                -pass pass:"$BACKUP_CRYPT_PASSWORD" -in FILE.enc -out FILE.tar.gz
BACKUP_CRYPT_PASSWORD=

# COMPOSE_PROJECT_NAME=glpi