.env.production.example

# CryoPit production template.
# Copy to a root/service-account-readable environment file and replace every
# CHANGE_ME value. Do not commit the completed file.

CRYOPIT_DB_PATH=/srv/cryopit/data/cryopit.db
CRYOPIT_EXPORT_DIR=/srv/cryopit/data/exports
CRYOPIT_RESEARCH_GROUP=CHANGE_ME
CRYOPIT_INSTITUTION=CHANGE_ME
CRYOPIT_CAMPAIGN=CHANGE_ME

# Listen only on the private interface reachable by the authenticated proxy.
CRYOPIT_HOST=127.0.0.1
CRYOPIT_PORT=8502
# Keep HTTP concurrency separate from the bounded HEIC/profile paths.
# Eight leaves routine-request headroom with the defaults below; tune from load tests.
CRYOPIT_THREADS=8

# SSO boundary. The proxy must strip any incoming copy and inject the verified,
# stable institutional subject identifier in this header.
CRYOPIT_TRUST_PROXY_AUTH=true
CRYOPIT_AUTH_HEADER=X-Remote-User
CRYOPIT_SECRET_KEY=CHANGE_ME_TO_AT_LEAST_32_RANDOM_CHARACTERS
CRYOPIT_IDENTITY_MAX_LENGTH=255
CRYOPIT_ENABLE_EDIT=true
CRYOPIT_SHOW_EXAMPLE_PLACEHOLDERS=false

# Enable only when the public URL is HTTPS and the proxy preserves this header.
CRYOPIT_ENABLE_HSTS=true
CRYOPIT_LOG_LEVEL=INFO

CRYOPIT_MAX_BODY_MB=32
CRYOPIT_ATTACHMENT_MAX_MB=25
CRYOPIT_HEIC_CONCURRENCY=1
CRYOPIT_FIGURE_DPI=150
CRYOPIT_PROFILE_CONCURRENCY=2
CRYOPIT_CSRF_TTL_SECONDS=43200
CRYOPIT_RATE_LIMIT_WRITES_PER_MINUTE=120
CRYOPIT_RATE_LIMIT_UPLOADS_PER_MINUTE=200
CRYOPIT_RATE_LIMIT_EXPORTS_PER_MINUTE=12
CRYOPIT_SAVED_PITS_LIMIT=10
CRYOPIT_SQLITE_JOURNAL=WAL