.env.example46 lines · main

1	# briven data-plane stack — environment template for infra/datapane/compose.yml.
2	# Copy to .env, fill in real values, then run:
3	# docker compose -f infra/datapane/compose.yml up -d
4
5	# ── Reverse proxy ───────────────────────────────────────────────────────
6	BRIVEN_PUBLIC_HOST=api.briven.tech
7	BRIVEN_PROXY_HTTP_PORT=8000
8	BRIVEN_PROXY_HTTPS_PORT=8443
9
10	# ── Postgres ────────────────────────────────────────────────────────────
11	BRIVEN_POSTGRES_DB=postgres
12	BRIVEN_POSTGRES_PASSWORD=replace-with-a-real-secret-min-32-chars
13	BRIVEN_DB_HOST_PORT=5432
14
15	# ── JWT (shared across auth / rest / realtime) ──────────────────────────
16	BRIVEN_JWT_SECRET=replace-with-a-real-jwt-secret-min-32-chars
17	BRIVEN_JWT_EXP=3600
18
19	# ── Auth (gotrue) ───────────────────────────────────────────────────────
20	BRIVEN_API_EXTERNAL_URL=https://api.briven.tech
21	BRIVEN_AUTH_SITE_URL=https://briven.tech
22	BRIVEN_AUTH_URI_ALLOW_LIST=
23	BRIVEN_AUTH_DISABLE_SIGNUP=false
24	BRIVEN_AUTH_EMAIL_ENABLED=true
25	BRIVEN_AUTH_MAILER_AUTOCONFIRM=false
26	BRIVEN_AUTH_SMTP_HOST=
27	BRIVEN_AUTH_SMTP_PORT=587
28	BRIVEN_AUTH_SMTP_USER=
29	BRIVEN_AUTH_SMTP_PASS=
30	BRIVEN_AUTH_SMTP_ADMIN_EMAIL=
31	BRIVEN_AUTH_SMTP_SENDER_NAME=briven
32
33	# ── PostgREST ───────────────────────────────────────────────────────────
34	BRIVEN_REST_DB_SCHEMAS=public,storage,graphql_public
35
36	# ── Realtime ────────────────────────────────────────────────────────────
37	BRIVEN_REALTIME_ENC_KEY=replace-with-a-real-16-byte-key
38	BRIVEN_REALTIME_SECRET_KEY_BASE=replace-with-a-real-64-byte-key
39
40	# ── pgBackRest backups (Cloudflare R2) — Phase 9 ────────────────────────
41	# Restore procedure: infra/datapane/RESTORE.md
42	BRIVEN_BACKUP_R2_BUCKET=briven-datapane-backups
43	BRIVEN_BACKUP_R2_ENDPOINT=https://<r2-account-id>.r2.cloudflarestorage.com
44	BRIVEN_BACKUP_R2_ACCESS_KEY=replace-with-r2-access-key
45	BRIVEN_BACKUP_R2_SECRET_KEY=replace-with-r2-secret-key
46	BRIVEN_BACKUP_ENCRYPTION_KEY=replace-with-aes-256-passphrase-min-32-chars