# generate with: openssl rand -hex 32 DB_PASSWORD= SECRET_KEY= # 10+ characters ADMIN_PASSWORD= # set to true once served over https via your reverse proxy COOKIE_SECURE=false # address the app listens on. 127.0.0.1 = this machine only. # Reverse proxy on another machine (e.g. over Tailscale)? use this host's tailscale IP (tailscale ip -4) BIND_ADDR=127.0.0.1