.env.example

# Breadbox Environment Configuration
# Copy this file to .local.env (for local dev) or .docker.env (for Docker)
# and fill in the values.

# --- Database ---
# Full connection string (preferred). If set, DB_HOST/PORT/NAME/USER/PASSWORD are ignored.
# Note: sslmode=disable is appropriate for Docker internal networking and local dev only.
# In production with external databases, use sslmode=require or sslmode=verify-full.
DATABASE_URL=postgres://breadbox:breadbox@localhost:5432/breadbox?sslmode=disable

# Individual DB vars (used only if DATABASE_URL is not set)
# DB_HOST=localhost
# DB_PORT=5432
# DB_NAME=breadbox
# DB_USER=breadbox
# DB_PASSWORD=breadbox

# --- Security ---
# 32-byte encryption key as 64-character hex. Generate with: openssl rand -hex 32
ENCRYPTION_KEY=

# --- Server ---
# HTTP listen port (default: 8080)
SERVER_PORT=8080

# Environment: "local" or "docker"
# Controls log format (text vs JSON) and which env file is loaded.
ENVIRONMENT=local

# Log level: debug, info, warn, error (case-insensitive)
# Default: "info" for docker, "debug" for local
# LOG_LEVEL=info

# Public hostname for HTTPS via Caddy (Docker prod only). Leave unset for
# localhost-only installs — Caddy is gated behind the `caddy` compose profile
# and only starts when DOMAIN is set.
# DOMAIN=breadbox.example.com

# --- Plaid ---
# These can also be set via the admin setup wizard (stored in app_config table).
# Env vars override app_config values.
PLAID_CLIENT_ID=
PLAID_SECRET=
PLAID_ENV=sandbox

# --- Teller ---
# Teller provider for bank connections (alternative to Plaid).
# Requires mTLS cert/key files. App ID can also be stored in app_config table.
# TELLER_APP_ID=
# TELLER_CERT_PATH=
# TELLER_KEY_PATH=
# TELLER_ENV=sandbox
# TELLER_WEBHOOK_SECRET=

# --- Connection Pool ---
# DB_MAX_CONNS=25
# DB_MIN_CONNS=2
# DB_MAX_CONN_LIFETIME_MINUTES=60

# --- HTTP Timeouts ---
# HTTP_READ_TIMEOUT_SECONDS=30
# HTTP_WRITE_TIMEOUT_SECONDS=60
# HTTP_IDLE_TIMEOUT_SECONDS=120

# --- Sync ---
# Per-connection sync timeout in seconds (default: 300 = 5 minutes)
# SYNC_TIMEOUT_SECONDS=300

# --- Docker Compose (read by the postgres image, NOT the breadbox binary) ---
# Only relevant when running the bundled compose stack. The postgres container
# uses these to initialize the database on first boot and the healthcheck to
# verify it. Keep them in sync with DATABASE_URL above.
POSTGRES_USER=breadbox
# IMPORTANT: Change this in production! Generate with: openssl rand -base64 32
POSTGRES_PASSWORD=breadbox
POSTGRES_DB=breadbox