# Aptify Environment Configuration

# Copy this file to .env and fill in the values.

# NEVER commit .env to version control.

# ── Required ─────────────────────────────────────────────────────────────────

# Admin user credentials — created on first start.

# ADMIN_PASSWORD must be at least 8 characters and must not be a known default.

ADMIN_USERNAME=admin

ADMIN_PASSWORD=

# JWT signing secret — used to sign session tokens.

# MUST be at least 32 characters. Generate with:

# openssl rand -hex 32

JWT_SECRET=

# ── GPG Repository Signing Key ────────────────────────────────────────────────

# Identity embedded in the generated GPG key.

# KEY_NAME=My APT Repository

# KEY_EMAIL=apt@example.com

# ── Network / URL ─────────────────────────────────────────────────────────────

# Public base URL of the server. Required when running behind a TLS reverse proxy.

# This controls the URLs shown in repository setup instructions.

# Example: BASE_URL=https://apt.mycompany.com

# BASE_URL=

# ── Database ──────────────────────────────────────────────────────────────────

# By default, Aptify uses an embedded SQLite database (no configuration needed).

# To use MySQL, uncomment and set the lines below.

# DB_TYPE=mysql

# DB_DSN=aptify:<MYSQL_PASSWORD>@tcp(db:3306)/aptify?parseTime=true

# MySQL credentials (only needed if DB_TYPE=mysql).

# MYSQL_PASSWORD=

# MYSQL_ROOT_PASSWORD=

# ── Optional / Development ────────────────────────────────────────────────────

# Set APTIFY_DEV=1 to allow an ephemeral auto-generated JWT_SECRET in

# development. DO NOT use in production. ADMIN_PASSWORD is still required.

# APTIFY_DEV=1

# Set ENABLE_PRIVATE_KEY_EXPORT=true to allow admin users to export the

# private GPG signing key via the API. Disabled by default.

# WARNING: Only enable this in a secure, private deployment.

# ENABLE_PRIVATE_KEY_EXPORT=false

# Rate limiting (login endpoint).

# LOGIN_RATE_LIMIT_ATTEMPTS=5

# LOGIN_RATE_LIMIT_WINDOW_SECONDS=60