.env.production.example

# Production .env for source builds (docker-compose.prod.yml).
# For the prebuilt-image install, see docs/self-hosting/installation.md (Option 1).
#
# Usage:
#   cp .env.production.example .env
#   # generate the two required values below
#   docker compose -f docker-compose.prod.yml up -d --build
#
# The two required values ship empty on purpose and the compose refuses to start while
# either is missing, so a skipped step is a clear error rather than a stack running on a
# password published in this repository.

# === REQUIRED ===

# JWT signing secret (min 32 chars) — generate with: openssl rand -hex 32
JWT_SECRET=

# Postgres password — generate with: openssl rand -base64 32
POSTGRES_PASSWORD=

# === OPTIONAL ===

# The public URL is set from the dashboard (Setup screen) after first boot, not
# from the environment. FRONTEND_URL is only for a split-frontend setup; on this
# single-binary self-hosted build leave it unset.

# Cloud mode is reserved for the managed senddock.dev product. Leave unset for a
# self-hosted instance (the default). CLOUD replaced the old DEPLOYMENT_MODE.
# CLOUD=false

# Per-IP request cap, rolling 60s window. Default 600. Only enforced with Redis.
# RATE_LIMIT_PER_MINUTE=600