env.example

FRONTEND_PORT=3000               #production client port
DEV_FRONTEND_PORT=3001           #development client port
TZ=America/New_York              #timezone for server (IANA format, e.g., America/Los_Angeles, Europe/London)

# OPTIONAL. Key used to encrypt stored third-party credentials (OAuth client
# secret and tokens, Home Assistant token, calendar and photo source passwords).
#
# You do not need to set this. If it is empty, HomeGlow generates a random key on
# first start and saves it to data/.encryption-key inside the mounted volume, so
# it survives restarts and image upgrades. Just include homeglow/data in your
# backups — losing that file means re-entering your stored credentials.
#
# Set it only to supply your own key or share one across instances. Must decode
# to 32 bytes; generate with:
#   openssl rand -base64 32
# Once credentials are stored, changing this invalidates them.
# ENCRYPTION_KEY=

# Set to true to run a public, self-resetting demo instance: in-memory database
# (wiped on stop), admin PIN disabled, sample data seeded and reset every 6h, and
# abuse-prone routes (uploads, CORS proxy, OAuth, outbound calendar fetches)
# blocked. Leave unset/false for a normal install. See docs/guides/demo-mode.md.
# DEMO_MODE=false