# Copy to .env on the VPS. Never commit the real file.

# Port the Node process binds to (localhost only, nginx proxies to it).
PORT=3001

# Comma separated list of origins allowed to POST to the endpoint.
ALLOWED_ORIGINS=https://sascha-bach.de,https://www.sascha-bach.de

# Where audit requests are delivered.
AUDIT_RECIPIENT=freelancer@sascha-bach.de

# SMTP credentials of the sending mailbox.
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASS=
# Envelope sender. Defaults to SMTP_USER when unset.
SMTP_FROM=

# --- Deploy webhook (backend/webhook/) --------------------------------------
# Shared secret, must match the "Secret" field of the webhook configured in
# Gitea/Forgejo (repo Settings -> Webhooks). Generate with:
#   openssl rand -hex 32
WEBHOOK_SECRET=

# Port the webhook listener binds on (127.0.0.1 only - never exposed).
WEBHOOK_PORT=3002

# Only pushes to this ref trigger a deploy. Change if the default branch is
# not "master".
WEBHOOK_BRANCH=refs/heads/master

# Optional. Only needed if the checkout lives somewhere other than
# /opt/audit-endpoint (deploy.sh's default).
# REPO_DIR=/opt/audit-endpoint