.env.example

# Server
NODE_ENV=development
PORT=5555
# Optional in development; defaults to http://localhost:${PORT}
# APP_URL=http://localhost:5555
# Address the built server listens on; every address when unset. The dev
# server (npm run dev) always listens on every address.
# HOST=127.0.0.1

# Database
# DB_FILE is the path to SQLite file (relative to project root)
DB_FILE=database/dev.sqlite3

# Scheduled database backups. Off in development; set hours to turn them on.
# DB_BACKUP_INTERVAL_HOURS=0
# DB_BACKUP_KEEP=7
# DB_BACKUP_DIR=database/backups

# Activity Feature: retention (days). Set 0 to retain activity indefinitely.
# ACTIVITY_RETENTION_DAYS=365

# Initial admin bootstrap (`npm run setup`)
# When unset, setup creates Admin / admin@nara.local with a temporary
# development password and requires it to be changed on first sign-in.
# NARA_ADMIN_NAME=Admin
# NARA_ADMIN_EMAIL=admin@example.com
# NARA_ADMIN_PASSWORD=choose-a-password

# Logging
# LOG_LEVEL options: trace, debug, info, warn, error, fatal
LOG_LEVEL=debug
# Pretty output defaults to on in development or a terminal
# LOG_PRETTY=true

# Security defaults (uncomment to override)
# RATE_LIMIT_MAX=600
# RATE_LIMIT_WINDOW_MS=900000
# AUTH_RATE_LIMIT_MAX=10
# AUTH_RATE_LIMIT_WINDOW_MS=60000
# MAX_JSON_BODY_BYTES=1048576
# TRUST_PROXY=false
# TRUST_PROXY_HOPS=1

# Auth Feature: sign-in lockout per email or IP (uncomment to override)
# AUTH_LOCKOUT_ATTEMPTS=5
# AUTH_LOCKOUT_WINDOW_MS=900000