example.env

# Environment
ENV=DEV
DEBUG=TRUE

# Database
# Local dev: Use localhost with your local postgres
# Docker dev: Compose file sets DB_HOST=db (bundled postgres)
# Production (Neon): Use pooled endpoint for DB_HOST, direct endpoint for DB_HOST_DIRECT
DB_HOST=localhost
# DB_HOST_DIRECT=  # Optional: direct endpoint for migrations (bypasses PgBouncer)
DB_NAME=leadr
DB_USER=leadr
DB_PASSWORD=change_me

JWT_SECRET="a.secret=="

MAILGUN_API_KEY=yourkey
MAILGUN_API_URL=https://api.eu.mailgun.net  # Or US alternative
MAILGUN_DOMAIN=something.mailgun.org
FROM_EMAIL=noreply  # Local part of sender address (combined with MAILGUN_DOMAIN)

SOURCE_OAUTH_BASE_URL=http://localhost:8000

API_KEY_SECRET="change-this-secret-api-key-pepper"

ENABLE_ADMIN_API=TRUE
ENABLE_CLIENT_API=TRUE

# When set, Game and Board API responses include url/url_short fields
# BOARDS_UI_DOMAIN=https://boards.example.com

SUPERADMIN_ACCOUNT_NAME="LEADR"
SUPERADMIN_ACCOUNT_SLUG="leadr"
SUPERADMIN_EMAIL="hello+unconfigured.superadmin@leadr.gg"
SUPERADMIN_DISPLAY_NAME="LEADR Admin"
SUPERADMIN_API_KEY="the most secure key you've ever generated" # Generate with: echo "ldr_$(openssl rand -base64 60 | tr -d '/+=\n')"
SUPERADMIN_API_KEY_NAME="One key to rule them all"

TESTING_EMAIL="hello@example.com"

ANTICHEAT_ENABLED=TRUE

# GeoIP Configuration (for automatic geo-labeling of score submissions)
# Sign up for free at: https://www.maxmind.com/en/geolite2/signup
MAXMIND_ACCOUNT_ID=your_maxmind_account_id
MAXMIND_LICENSE_KEY=your_maxmind_license_key
MAXMIND_CITY_DB_URL=https://download.maxmind.com/geoip/databases/GeoLite2-City/download?suffix=tar.gz
MAXMIND_COUNTRY_DB_URL=https://download.maxmind.com/geoip/databases/GeoLite2-Country/download?suffix=tar.gz
GEOIP_DATABASE_PATH=.geoip
GEOIP_REFRESH_DAYS=7
GEOIP_DOWNLOAD_ENABLED=true
DEV_OVERRIDE_IP=8.8.8.8  # Optional: Use real IP in dev (since localhost isn't in GeoIP DB)

# Logging Configuration
LOG_TO_FILE=FALSE  # Enable file logging in addition to stdout
LOG_DIR=/var/log/leadr  # Directory for log files when LOG_TO_FILE is enabled
LOG_JSON=TRUE  # Use JSON format for logs (FALSE for colored console in dev)

# Backup Configuration (for scheduled database backups to object storage)
BACKUP_ENABLED=false
# BACKUP_STORAGE_BUCKET=my-backup-bucket
# BACKUP_STORAGE_PREFIX=leadr-backups
# BACKUP_STORAGE_ENDPOINT_URL=https://fsn1.your-objectstorage.com  # Required for S3-compatible providers (Hetzner, R2, MinIO)
# BACKUP_STORAGE_REGION=fsn1
# BACKUP_STORAGE_ACCESS_KEY_ID=your_access_key
# BACKUP_STORAGE_SECRET_ACCESS_KEY=your_secret_key

# Deployment Configuration (for docker-compose.base.yml and docker-compose.selfhost.yml)
LEADR_IMAGE_TAG=latest
RUN_MIGRATIONS=true

# Self-hosting: Domain for Caddy (automatic HTTPS via Let's Encrypt)
# Set to your actual domain for production, or localhost for testing
DOMAIN=localhost