ardent-forge/.env.example at develop · rghsoftware/ardent-forge · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
# Ardent Forge -- Docker Self-Hosting Configuration
# Copy this file to .env and fill in your values:
#   cp .env.example .env
#   ./scripts/generate-keys.sh
#
# The generate-keys.sh script will populate POSTGRES_PASSWORD,
# JWT_SECRET, ANON_KEY, and SERVICE_ROLE_KEY automatically.

# ---------------------------------------------------------------------------
# Required
# ---------------------------------------------------------------------------

# Public URL of your Ardent Forge instance (used for TLS, OAuth redirects, etc.)
SITE_URL=http://localhost:8080

# Host ports for the Caddy reverse proxy (default: 80/443 for production)
# On rootless Docker/Podman, set to 8080/8443 if you cannot bind privileged ports.
# To bind 80/443 on rootless: sudo sysctl -w net.ipv4.ip_unprivileged_port_start=80
HTTP_PORT=8080
HTTPS_PORT=8443

# Database password -- generate a strong random value (generate-keys.sh does this)
POSTGRES_PASSWORD=changeme

# Supabase JWT signing secret -- used to mint and verify auth tokens
JWT_SECRET=your-jwt-secret-here

# Supabase publishable (anon) key -- safe to expose to browsers and mobile clients
ANON_KEY=your-anon-key-here

# Supabase service-role key -- full database access, never expose to clients
SERVICE_ROLE_KEY=your-service-role-key-here

# ---------------------------------------------------------------------------
# Postgres
# ---------------------------------------------------------------------------

# Hostname of the Postgres container (default matches the docker-compose service name)
POSTGRES_HOST=db

# Postgres port inside the Docker network
POSTGRES_PORT=5432

# Postgres database name
POSTGRES_DB=postgres

# ---------------------------------------------------------------------------
# Optional -- Realtime secrets (auto-generated by generate-keys.sh)
# ---------------------------------------------------------------------------

# Encryption key for Supabase Realtime internal data (16+ random chars)
REALTIME_DB_ENC_KEY=your-realtime-enc-key-here

# Phoenix/Erlang secret key base for the Realtime service (64+ random chars)
REALTIME_SECRET_KEY_BASE=your-realtime-secret-key-base-here

# ---------------------------------------------------------------------------
# Optional -- Supabase Studio
# ---------------------------------------------------------------------------

# Enable the Supabase Studio admin dashboard.
# To start with Studio: docker compose --profile studio up -d
# Or set this variable and Studio will be included automatically:
# COMPOSE_PROFILES=studio

# ---------------------------------------------------------------------------
# Optional -- SMTP (required for email-based auth: magic links, confirmations)
# ---------------------------------------------------------------------------

# SMTP_HOST=smtp.example.com
# SMTP_PORT=587
# SMTP_USER=
# SMTP_PASS=
# SMTP_SENDER_EMAIL=noreply@example.com

# ---------------------------------------------------------------------------
# Optional -- Google OAuth
# ---------------------------------------------------------------------------

# Set GOOGLE_ENABLED=true and provide client credentials to enable Google sign-in
# GOOGLE_ENABLED=true
# GOOGLE_CLIENT_ID=
# GOOGLE_CLIENT_SECRET=