wavecontrol.env.example

# WaveControl runtime environment
#
# This file is accepted by Linux systemd, the OpenBSD rc.d script, and
# windows/run-wavecontrol.ps1. Keep values on one line. Quoting values is
# recommended; the Windows loader removes one matching pair of single or
# double quotes.
#
# Unix: make install creates /etc/wavecontrol/wavecontrol.env from this file
# only when the active file does not already exist.
# Windows: windows/build.ps1 places both wavecontrol.env.example and a first
# wavecontrol.env beside wavecontrol.exe. Use -KeepExisting when rebuilding an
# existing package directory so the populated active file is preserved.
#
# Protect the populated file. WAVECONTROL_DATA_KEY must remain stable for the
# lifetime of the database because it encrypts stored operational credentials.

WAVECONTROL_DSN='postgres://wavecontrol:CHANGE_ME@127.0.0.1:5432/wavecontrol?sslmode=disable'
WAVECONTROL_JWT_SECRET='REPLACE_WITH_AT_LEAST_32_RANDOM_CHARACTERS'
WAVECONTROL_DATA_KEY='REPLACE_WITH_BASE64_OF_32_RANDOM_BYTES'

# Required only while starting an empty database for the first time. Uncomment,
# choose a strong one-time password, start WaveControl once, then remove or
# comment these values and restart. WaveControl fails closed when an empty
# database has no explicit bootstrap account.
# WAVECONTROL_BOOTSTRAP_USERNAME='wavecontrol-admin'
# WAVECONTROL_BOOTSTRAP_PASSWORD='REPLACE_WITH_A_STRONG_ONE_TIME_PASSWORD'

# Optional path overrides. Installed Unix services and the Windows run script
# already supply correct paths, so these normally remain unset.
# WAVECONTROL_WORKDIR='/var/wavecontrol'
# WAVECONTROL_WEBROOT='/var/wavecontrol/web'