.env.example

# Obsidian LiveSync - CouchDB Configuration
# Copy this file to .env and set real values:
#   cp .env.example .env
#   chmod 600 .env

# Admin username for CouchDB
COUCHDB_USER=obsidian_admin

# Admin password - CHANGE THIS to a strong random password
# Generate one with: openssl rand -base64 32
COUCHDB_PASSWORD=CHANGE_ME_TO_A_STRONG_RANDOM_PASSWORD

# Optional: secret for cookie auth HMAC signing
# The entrypoint writes this to CouchDB config automatically.
# Generate with: openssl rand -hex 16
# COUCHDB_SECRET=

# CouchDB Docker image tag (must support linux/arm64)
COUCHDB_IMAGE_TAG=3.4.3

# Path for CouchDB data persistence
# On Pi with SSD: /mnt/ssd/couchdb-data
COUCHDB_DATA_PATH=./couchdb-data

# Container memory limit (adjust for your Pi)
# Pi 4 (4GB) with other services: 512m is a good default
COUCHDB_MEM_LIMIT=512m

# -- Off-site backup (Backblaze B2 via rclone) -------------
# Remote name as configured in `rclone config` (e.g., "b2-obsidian")
OFFSITE_REMOTE=
# Bucket/path on the remote (e.g., "obsidian-backups")
OFFSITE_PATH=
# Number of off-site backups to retain (default: 7)
OFFSITE_RETAIN_COUNT=7
# age public key for encrypting backups before upload (REQUIRED)
# Generate keypair: age-keygen -o age-key.txt
# Put the PUBLIC key (age1...) here; store age-key.txt outside the Pi (e.g., password manager)
OFFSITE_ENCRYPTION_KEY=