# APC UPS Dashboard environment template
# Copy to `.env` and fill in values. Never commit real .env files.

# --- Required in production ---
# Random 32+ byte string. Generate with:
#   python -c "import secrets; print(secrets.token_urlsafe(48))"
SESSION_SECRET=change-me-to-a-random-string

# Admin password hash (argon2). Generate with:
#   python -c "from passlib.hash import argon2; print(argon2.hash('mysecret'))"
# If unset and no admin stored in Redis, the app shows a first-run setup page.
ADMIN_USERNAME=admin
# ADMIN_PASSWORD_HASH=

# --- Redis ---
REDIS_URL=redis://redis:6379/0
# REDIS_PASSWORD=  # only used if you enable --requirepass in docker-compose

# --- SMTP (optional; configure via Settings UI for host/port/etc) ---
# SMTP password is read from env only; never stored in Redis.
# SMTP_PASSWORD=

# --- Networking / validation ---
# Set false to block all RFC1918 IPs in UPS host field (default true for homelab).
ALLOW_PRIVATE_IPS=true
# Set true when behind an HTTPS reverse proxy (enables Secure cookie + HSTS).
TRUST_PROXY=false

# --- Observability ---
LOG_LEVEL=INFO
# Session expiry (seconds). Default 14 days.
SESSION_MAX_AGE_SECONDS=1209600

# --- Locale ---
TZ=UTC

# --- Rate limiting (set false in tests) ---
RATE_LIMIT_ENABLED=true

# --- Legacy YAML migration (unused unless you bind-mount /config) ---
# UPS_CONFIG_PATH=/config/ups.yaml