# Copy this file to .env, fill real values, then run:
#   docker compose up -d

COMPOSE_PROJECT_NAME=remnawave-minishop
IMAGE_TAG=latest

# Direct host port publishing. Use 127.0.0.1:PORT for local-only access.
WEB_SERVER_BIND=0.0.0.0:8080
FRONTEND_BIND=0.0.0.0:8082

# URLs that reach the published ports.
# For local checks HTTP is fine. Telegram webhooks and Mini Apps require
# public HTTPS in production; the app containers themselves do not terminate TLS.
WEBHOOK_PUBLIC_URL=http://127.0.0.1:8080
MINIAPP_PUBLIC_URL=http://127.0.0.1:8082/

# Telegram bot token from @BotFather.
BOT_TOKEN=your_bot_token_here

# Telegram numeric user IDs allowed to open the admin panel.
ADMIN_IDS=123456789

# PostgreSQL credentials created by Docker Compose.
POSTGRES_USER=remnawave_minishop
POSTGRES_PASSWORD=change_me_to_a_long_random_password
POSTGRES_DB=remnawave_minishop

# Keep Web App enabled for the first setup.
WEBAPP_ENABLED=True

# Stable secrets. Generate with:
#   openssl rand -hex 32
WEBAPP_SESSION_SECRET=change_me_to_64_hex_chars
WEBHOOK_SECRET_TOKEN=change_me_to_64_hex_chars

# Remnawave panel integration.
PANEL_API_URL=https://panel.example.com/api
PANEL_API_KEY=change_me
PANEL_WEBHOOK_SECRET=change_me

TRUSTED_PROXIES=127.0.0.1,::1

# Periodic backups from the worker container. Disabled by default.
BACKUP_ENABLED=False
BACKUP_CHAT_ID=
BACKUP_INTERVAL_SECONDS=3600
BACKUP_LOCAL_RETENTION=100
BACKUP_ARCHIVE_SIGNATURE_REQUIRED=True
BACKUP_ARCHIVE_SIGNATURE_SECRET=
BACKUP_COMPOSE_ENABLED=True
COMPOSE_BACKUP_SOURCE=.
COMPOSE_RESTORE_MODE=rw