# Copy to deploy/production.env on the server and fill in. Never commit the real file.

DOMAIN=musicshare.binarygnome.com

# openssl rand -hex 32   (hex: the password goes inside a URL, so no / + = characters)
POSTGRES_PASSWORD=
# openssl rand -base64 32   (reuse the old key when importing a database, or saved connections break)
TOKEN_ENCRYPTION_KEY=

# Optional: exact "Open in Spotify" links (catalog search only; no user sign-in)
SPOTIFY_CLIENT_ID=
SPOTIFY_CLIENT_SECRET=
LASTFM_API_KEY=
LASTFM_SHARED_SECRET=
ODESLI_API_KEY=
PLEX_CLIENT_ID=musicshare
APPLE_TEAM_ID=
APPLE_MUSICKIT_KEY_ID=
APPLE_MUSICKIT_PRIVATE_KEY=

# Optional donation link shown on the website
DONATION_URL=

# Outgoing email (verification, password reset). SMTPS on 465.
SMTP_HOST=
SMTP_PORT=465
SMTP_USER=
SMTP_PASSWORD=
MAIL_FROM=musicshare <app@musicshare.binarygnome.com>

# Only with docker-compose.behind-proxy.yml (an existing proxy like NPMplus owns 80/443):
# the ports the proxy forwards to. Use 127.0.0.1 if the proxy runs with host networking,
# otherwise this server's LAN IP.
PROXY_BIND=127.0.0.1
WEB_PORT=3737
API_PORT=3738