.env.example

# Runtime
NODE_ENV=prod
PORT=8080
SOCKETIO_PORT=9000
# Preserve room membership while clients reconnect after a socket deploy.
ROOM_RECONNECT_GRACE_MS=60000
# Grand Prix is intentionally disabled until the mode is redesigned.
GRAND_PRIX_ENABLED=false
# Friend System routes remain disabled through the #188 launch gate.
SOCIAL_FEATURES_ENABLED=false
# Comma-separated WCA user IDs approved for the solve-history preview.
FEATURE_SOLVE_HISTORY_USER_IDS=
# Manual Compose commands use this tag. scripts/deploy.sh overrides it with
# the full deployed commit SHA.
APP_IMAGE_TAG=local

# Public URLs used by the client build
REACT_APP_API_ORIGIN=
REACT_APP_SOCKETIO_ORIGIN=
REACT_APP_WCA_ORIGIN=https://www.worldcubeassociation.org
REACT_APP_WCA_CLIENT_ID=replace-me

# Server config
REDIS_URL=redis://redis:6379
POSTGRES_ENABLED=true
# DATABASE_URL can replace the individual PG* connection fields.
DATABASE_URL=
# Optional direct connection for Prisma migrations when DATABASE_URL is pooled.
DIRECT_DATABASE_URL=
PGHOST=postgres
PGPORT=5432
PGDATABASE=letscube
PGUSER=letscube
POSTGRES_PASSWORD=replace-with-a-long-random-secret
PGSSL=false
PGSSL_REJECT_UNAUTHORIZED=true
PGSSL_CA=
AUTH_SECRET=replace-with-a-long-random-secret
SESSION_SECRET=
AUTH_CALLBACK_URL=https://letscube.net/auth/callback
WCA_SOURCE=https://www.worldcubeassociation.org
WCA_CLIENT_ID=replace-me
WCA_CLIENT_SECRET=replace-me
CORS_ORIGINS=https://letscube.net,https://www.letscube.net
METRICS_ENABLED=true
METRICS_RETENTION_DAYS=90
METRICS_HASH_SECRET=replace-with-a-different-long-random-secret

# Nginx TLS mounts
LETSENCRYPT_DIR=/etc/letsencrypt
CERTBOT_WWW_DIR=/var/www/certbot

# PostgreSQL backups
BACKUP_DIR=/opt/letscube/backups
PG_BACKUP_URI=postgresql://letscube:replace-with-a-long-random-secret@127.0.0.1:5432/letscube
BACKUP_S3_URI=
AWS_ENDPOINT_URL=
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_DEFAULT_REGION=us-east-1