# generate with: openssl rand -hex 32
DB_PASSWORD=
SECRET_KEY=
# 10+ characters
ADMIN_PASSWORD=
# set to true once served over https via your reverse proxy
COOKIE_SECURE=false
# address the app listens on. 127.0.0.1 = this machine only.
# Reverse proxy on another machine (e.g. over Tailscale)? use this host's tailscale IP (tailscale ip -4)
BIND_ADDR=127.0.0.1
# port exposed on the host (the container itself always listens on 8000)
HOST_PORT=8888
# serving under a sub path? e.g. /mtg (no trailing slash). Leave empty for a domain root.
BASE_PATH=