.env.local.example

# Local setup (Linux or macOS or Windows with WSL2)
#
# 1. cp .env.local.example .env.local
# 2. Generate three URL safe passwords and paste each into BOTH the matching
#    *_PASSWORD var and DATABASE_*_URL below:
#        openssl rand -hex 32
# 3. Generate BETTER_AUTH_SECRET: openssl rand -base64 32
# 4. bun run db:setup
# 5. bun run build
# 6. bun run start

APP_USER_PASSWORD=replace-me
SERVICE_ROLE_PASSWORD=replace-me
AUTH_ROLE_PASSWORD=replace-me

DATABASE_URL=postgresql://app_user:replace-me@localhost:5432/piyaz
DATABASE_SERVICE_ROLE_URL=postgresql://service_role:replace-me@localhost:5432/piyaz
DATABASE_AUTH_URL=postgresql://auth_role:replace-me@localhost:5432/piyaz

BETTER_AUTH_SECRET=replace-me
BETTER_AUTH_URL=http://localhost:3000

# Postgres superuser password. Read on first init only. Defaults to a
# well-known value, which is fine while 5432 is bound to loopback.
# POSTGRES_PASSWORD=replace-me

# The one header your reverse proxy sets with the client address. "none" trusts
# no header, which is right when nothing fronts the app. `bun run start` requires it.
# Behind a proxy, name its header instead: docs.piyaz.ai/docs/self-hosting
TRUSTED_PROXY_HEADER=none

# Your proxies' own IPs or CIDR ranges, comma separated. List exactly the
# proxies you run, no more and no less: an entry that covers client addresses
# lets a caller pick their own identity, and a missing entry behind two or
# more appending proxies collapses every user onto one address. A single
# proxy needs no list. Entries that do not parse fail boot.
# Details: docs.piyaz.ai/docs/self-hosting
# TRUSTED_PROXIES=10.0.0.1