.env.example

# Web CLI Environment Configuration
# Copy this file to .env and customize for your deployment
#
# Usage:
#   cp .env.example .env
#   # Edit .env with your settings
#   docker compose up -d

# ===========================================
# Server Configuration
# ===========================================

# Port to listen on
WEBCLI_PORT=7777

# Host to bind to (use 0.0.0.0 for all interfaces)
WEBCLI_HOST=0.0.0.0

# ===========================================
# Database & Encryption
# ===========================================

# Path to SQLite database file
WEBCLI_DATABASE_PATH=/data/web-cli.db

# Path to encryption key file
WEBCLI_ENCRYPTION_KEY_PATH=/data/.encryption_key

# Optional: Provide encryption key directly (base64 encoded, 32 bytes)
# Generate with: openssl rand -base64 32
# IMPORTANT: Backup this key! Data cannot be recovered without it.
# ENCRYPTION_KEY=

# ===========================================
# Authentication (REQUIRED for production)
# ===========================================

# Enable authentication (set to true for production!)
AUTH_ENABLED=false

# HTTP Basic Authentication credentials
AUTH_USERNAME=admin
AUTH_PASSWORD=changeme

# API Token for Bearer authentication (alternative to Basic Auth)
# Generate with: openssl rand -base64 32
# AUTH_API_TOKEN=

# ===========================================
# TLS/HTTPS Configuration
# ===========================================

# Path to TLS certificate file (enables HTTPS)
# WEBCLI_TLS_CERT_PATH=/certs/cert.pem

# Path to TLS private key file
# WEBCLI_TLS_KEY_PATH=/certs/key.pem

# Require HTTPS when authentication is enabled (rejects HTTP requests)
# WEBCLI_REQUIRE_HTTPS=true

# ===========================================
# CORS Configuration
# ===========================================

# Allowed origins for CORS (comma-separated)
# Default: localhost only
# Example: https://web-cli.example.com,https://admin.example.com
# CORS_ALLOWED_ORIGINS=