.env.example

# Production environment for docker-compose.prod.yml.
# Copy to `.env`, fill in real values, and never commit it.

# ---- Database ---------------------------------------------------------------
POSTGRES_USER=travel
POSTGRES_DB=traveljournal
# Use a long random value.
#   python -c "import secrets; print(secrets.token_urlsafe(32))"
POSTGRES_PASSWORD=

# ---- Application secret -----------------------------------------------------
# Signs access tokens. Rotating it invalidates every active session.
#   python -c "import secrets; print(secrets.token_urlsafe(48))"
SECRET_KEY=

# ---- Public URLs ------------------------------------------------------------
# The origin browsers use. Photo URLs are built from this, so it must be correct.
PUBLIC_BASE_URL=https://journal.example.com
# Comma-separated. A wildcard is rejected in production.
CORS_ORIGINS=https://journal.example.com

# ---- Optional ---------------------------------------------------------------
HTTP_PORT=80
ACCESS_TOKEN_TTL_MINUTES=15
REFRESH_TOKEN_TTL_DAYS=30