.env.example

# Set the environment to either 'development', 'localhost' or 'production'
APP_ENV=production

# Apple Silicon support knobs
# - If true on arm64: build native arm64 images locally in development
# - If false on arm64: use amd64 images under emulation (default safer)
BUILD_NATIVE_ARM64=false
# Force a docker platform for pulls/builds (auto-set by arch.sh; leave blank here)
FORCE_PLATFORM=

ADMIN_PASSWORD='password'

BACKEND_CONTAINER_NAME=socialpredict-backend-container
BACKEND_IMAGE_NAME=ghcr.io/openpredictionmarkets/socialpredict-backend
# External Backend Port
BACKEND_PORT=8080

POSTGRES_CONTAINER_NAME=socialpredict-postgres-container
DB_HOST=db
# External Postgres Port
DB_PORT=5432
POSTGRES_USER='user'
POSTGRES_PASSWORD='password'
POSTGRES_DATABASE='socialpredict_db'
POSTGRES_VOLUME='pgdata'
# Packaged production uses local Docker Postgres on the internal compose network.
# External production databases should choose DB_REQUIRE_TLS/DB_SSLMODE explicitly.
DB_REQUIRE_TLS=false
DB_SSLMODE=disable

FRONTEND_CONTAINER_NAME=socialpredict-frontend-container
FRONTEND_IMAGE_NAME=ghcr.io/openpredictionmarkets/socialpredict-frontend
# External Frontend Port
FRONTEND_PORT=5173

NGINX_IMAGE_NAME=socialpredict-nginx
NGINX_CONTAINER_NAME=socialpredict-nginx-container
# External Nginx Port
NGINX_PORT=80

# Domain name you wish to use
DOMAIN='domain.com'
DOMAIN_URL='domain.com'
API_URL='domain.com'
PUBLIC_BASE_URL='https://domain.com'
# Public edge mode for production-style installs: https or http.
# Use http only for temporary raw-IP load-test hosts.
TLS_MODE=https

# Public sharing and iframe policy.
# Default backend behavior is frame-ancestors 'none' plus X-Frame-Options DENY.
# Set SECURITY_FRAME_ANCESTORS to an explicit comma-separated allowlist to permit embedding.
# Example: SECURITY_FRAME_ANCESTORS="'self', https://partner.example"
SECURITY_FRAME_ANCESTORS="'none'"
SHARE_DEFAULT_IMAGE_URL=''
SHARE_SITE_NAME='SocialPredict'

# Runtime rate limits are ops/security posture, not game setup.
# secure-default profile:
RATE_LIMIT_LOGIN_RATE_PER_SECOND=0.1
RATE_LIMIT_LOGIN_BURST=3
RATE_LIMIT_GENERAL_RATE_PER_SECOND=1
RATE_LIMIT_GENERAL_BURST=10
RATE_LIMIT_CLEANUP_INTERVAL=5m

TRAEFIK_CONTAINER_NAME=socialpredict-traefik-container