.env.example

# FetPost environment configuration — copy to .env and fill in your own values.
# Each value should be a long random string. Generate one with:
#   node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"

# Shared secret between the UI and the FetLife service (HTTP auth between localhost services).
FL_SERVICE_SECRET=replace-me-with-a-random-32-byte-hex-string

# Encryption key for stored credentials (AES-256-GCM). NEVER share this — losing it means
# you'll need to re-enter your account passwords. NEVER reuse across machines.
FL_MACHINE_SECRET=replace-me-with-a-random-32-byte-hex-string

# X11 display target on Linux (used by Playwright when the cookie extractor runs headed).
# Set to :1 if you're running TigerVNC on display :1; remove this on Windows/macOS.
# DISPLAY=:1

# ── Optional: Canva integration ──────────────────────────────────────────────
# To enable the "Pick from Canva" button in Compose, register a Canva app
# at https://www.canva.com/developers/ and fill in these three values.
# Leave them blank/unset if you don't want Canva integration; the UI will hide it.
#
# The redirect URI must match EXACTLY what you registered in the Canva
# developer portal. If you're running on a Tailscale name, use that hostname.
# If Canva rejects the redirect URI, you may need HTTPS — in which case put
# a domain you own behind Caddy/nginx with Let's Encrypt and use https:// here.
# CANVA_CLIENT_ID=
# CANVA_CLIENT_SECRET=
# CANVA_REDIRECT_URI=http://localhost:4000/oauth/canva/callback