.env.example

# Database Configuration
DATABASE_URL=sqlite:///./ectlogger.db
# For PostgreSQL: postgresql+asyncpg://user:password@localhost/ectlogger
# For MySQL: mysql+aiomysql://user:password@localhost/ectlogger

# Security
SECRET_KEY=your-secret-key-here-change-in-production
ALGORITHM=HS256
ACCESS_TOKEN_EXPIRE_MINUTES=1440  # 24 hours (1440 minutes)

# Magic Link Configuration
# How many days magic links remain valid (default: 30 days)
# Extended duration supports long emergency events/storms where operators
# need persistent access without frequent re-authentication
MAGIC_LINK_EXPIRE_DAYS=30

# Frontend URL
FRONTEND_URL=http://localhost:3000

# Backend Port (default: 8000)
# Change this if port 8000 is already in use by another service
BACKEND_PORT=8000

# OAuth Providers
# Google OAuth
GOOGLE_CLIENT_ID=your-google-client-id
GOOGLE_CLIENT_SECRET=your-google-client-secret

# Microsoft OAuth
MICROSOFT_CLIENT_ID=your-microsoft-client-id
MICROSOFT_CLIENT_SECRET=your-microsoft-client-secret

# GitHub OAuth
GITHUB_CLIENT_ID=your-github-client-id
GITHUB_CLIENT_SECRET=your-github-client-secret

# Email Configuration (SMTP)
# Master send switch. Set to false on any non-production instance so it can
# never mail real users, regardless of the SMTP settings below. Sends become
# no-ops that log the intended recipient. Defaults to true when unset.
EMAIL_ENABLED=true
SMTP_HOST=smtp.gmail.com
SMTP_PORT=587
SMTP_USER=your-email@gmail.com
SMTP_PASSWORD=your-app-password
SMTP_FROM_EMAIL=noreply@ectlogger.com
SMTP_FROM_NAME=ECTLogger

# Application Settings
APP_NAME=ECTLogger
APP_ENV=development

# Logging
# LOG_LEVEL controls verbosity: DEBUG (most verbose), INFO (default), WARNING, ERROR (least verbose)
# DEBUG: Shows all details including tokens, payloads, SQL queries
# INFO: Shows important events like logins, emails sent, API requests
# WARNING: Shows only unexpected events and errors
# ERROR: Shows only critical errors
LOG_LEVEL=INFO

# Log file path (optional, for Fail2Ban integration)
# When set, logs are written to this file in addition to console output
# Required for Fail2Ban protection - see FAIL2BAN.md for setup
# LOG_FILE=/var/log/ectlogger/app.log

# Frontend Serving (for production deployments with reverse proxy)
# Set to true when using Caddy, Nginx, or another reverse proxy to serve
# the static frontend files from frontend/dist/
# When true, Vite dev server will NOT start - reverse proxy serves frontend
# When false (default), Vite dev server runs for hot-reload during development
# SKIP_VITE=false