# Copy to .env on the VPS. Never commit the real file.

# Port the Node process binds to (localhost only, the reverse proxy - nginx
# or Caddy - proxies to it).
PORT=3001

# Comma separated list of origins allowed to POST to the endpoint.
ALLOWED_ORIGINS=https://sascha-bach.de,https://www.sascha-bach.de

# Where audit requests are delivered.
AUDIT_RECIPIENT=freelancer@sascha-bach.de

# SMTP credentials of the sending mailbox.
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASS=
# Envelope sender. Defaults to SMTP_USER when unset.
SMTP_FROM=

# --- Deploy webhook (backend/webhook/) --------------------------------------
# Shared secret, must match the "Secret" field of the webhook configured in
# Gitea/Forgejo (repo Settings -> Webhooks). Generate with:
#   openssl rand -hex 32
WEBHOOK_SECRET=

# Port the webhook listener binds on.
WEBHOOK_PORT=3002

# Only pushes to this ref trigger a deploy. Change if the default branch is
# not "master".
WEBHOOK_BRANCH=refs/heads/master

# Optional. Only needed if the checkout lives somewhere other than
# /opt/audit-endpoint (deploy.sh's default).
# REPO_DIR=/opt/audit-endpoint

# --- Reverse proxy running in Docker (e.g. Caddy) ---------------------------
# Only needed if whatever proxies requests to these two services (audit
# endpoint + webhook) itself runs in a Docker container. 127.0.0.1 inside
# that container is its own loopback, not this host's, so both services also
# bind this address in addition to 127.0.0.1. Leave unset if the proxy runs
# natively on this machine.
#
# Find the value with (replace with your proxy container's name):
#   docker inspect <proxy-container> --format \
#     '{{range $k, $v := .NetworkSettings.Networks}}{{$k}}: {{$v.Gateway}}{{"\n"}}{{end}}'
# DOCKER_BRIDGE_HOST=172.19.0.1