# ©AngelaMos | 2026
# .env.example.prod

APP_NAME=situation-monitor-prod
PUBLIC_URL=https://xxx.xxx

NGINX_HOST_PORT=7729
BACKEND_HOST_PORT=9292
FRONTEND_HOST_PORT=49967
POSTGRES_HOST_PORT=47844
REDIS_HOST_PORT=55675

POSTGRES_USER=
POSTGRES_PASSWORD=
POSTGRES_DB=

REDIS_PASSWORD=

# AES-256 key for at-rest encryption of webhook URLs / bot tokens.
# Generate with: openssl rand -base64 32
# Without this set, the entire notifications + alerts pipeline is disabled.
NOTIFICATION_ENCRYPTION_KEY=

NVD_API_KEY=
CF_RADAR_TOKEN=c
GREYNOISE_API_KEY=
ABUSEIPDB_API_KEY=

CLOUDFLARE_TUNNEL_TOKEN=

VITE_API_URL=/api

# Number of trusted reverse-proxy hops in front of the backend.
# Dev: nginx -> backend = 1.  Prod with Cloudflare Tunnel = 2 (CF + nginx).
TRUSTED_PROXY_HOPS=2

# Email for the bootstrap admin. The matching account is auto-promoted to
# role=admin on registration / login. Leave blank to disable auto-promotion.
ADMIN_EMAIL=