.env.example

# =============================================================
# HomeLab OS — environment variable reference
# All values below are placeholders. Never commit real secrets.
# Copy to `.env` (backend loads it via dotenv) and adjust.
# =============================================================

# --- Backend ---
PORT=4000
HOST=0.0.0.0
CORS_ORIGIN=http://localhost:5173

# Directory for the SQLite database, history, backups and secrets
DATA_DIR=./data

# true = simulated telemetry (default). false = live Proxmox VE data.
MOCK_MODE=true

# Simulation tick / WebSocket push cadence (ms)
TELEMETRY_INTERVAL_MS=2000
# Seeded history retention window (hours)
HISTORY_RETENTION_HOURS=24

# --- Proxmox VE provider (MOCK_MODE=false) ---
# Host of the Proxmox API, with port if non-standard (https://<host>:8006)
PROXMOX_HOST=
# API token ID, format: '<user>@<realm>!<tokenname>' (e.g. root@pam!homelab)
PROXMOX_TOKEN_ID=
# API token secret (show once when creating the token in Proxmox)
PROXMOX_TOKEN_SECRET=
# Proxmox uses self-signed certs by default. 'true' validates the TLS chain.
PROXMOX_VERIFY_TLS=false
# How often the backend polls Proxmox (ms)
PROXMOX_POLL_INTERVAL_MS=5000

# --- Docker provider (optional; MOCK_MODE=false) ---
# Reads container list from the Docker Engine and draws a 'docker01 -> containers'
# layer on the Network Map. Requires the socket to be mounted into the container
# (volumes: /var/run/docker.sock:/var/run/docker.sock) and the 'Docker Monitoring'
# feature flag to be enabled in the dashboard.
DOCKER_ENABLED=false
# Unix socket path, or a tcp://host:port Docker Engine endpoint.
DOCKER_HOST=/var/run/docker.sock
# Name pattern (case-insensitive) of the PVE guest that hosts Docker.
DOCKER_HOST_GUEST=docker
# How often the backend polls Docker (ms)
DOCKER_POLL_INTERVAL_MS=10000

# Encrypts stored secrets (integration credentials, recovery email).
# Set to a long random string. If empty, a key is derived and stored
# under DATA_DIR (regenerated if DATA_DIR is wiped).
SECRET_ENCRYPTION_KEY=

# On first boot the super admin is created with this password.
# If empty, a random password is generated and written to
# DATA_DIR/.admin-initial-password.
ADMIN_INITIAL_PASSWORD=

# Only sets the session cookie Secure flag when both this is 'true'
# and NODE_ENV=production (i.e. behind HTTPS).
COOKIE_SECURE=false
NODE_ENV=development

# --- Frontend (build-time / dev) ---
# API base path for the SPA (nginx proxies /api -> backend)
VITE_BACKEND_URL=/api
# WebSocket endpoint (defaults to ws(s)://<host>/ws)
VITE_WS_URL=