.env.example

# LibraryForge local-development example.
# Copy this file to .env and replace the placeholder secrets before production.

FFPROBE_PATH=ffprobe
FFMPEG_PATH=ffmpeg

DJANGO_SECRET_KEY=replace-this-with-a-generated-random-secret
DJANGO_DEBUG=true
DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1
DJANGO_CSRF_TRUSTED_ORIGINS=http://localhost:5173,http://127.0.0.1:5173

# HTTPS / reverse-proxy hardening.
# Keep these disabled for plain-http local development.
DJANGO_SECURE_COOKIES=false
DJANGO_SECURE_SSL_REDIRECT=false
DJANGO_TRUST_X_FORWARDED_PROTO=false
DJANGO_SECURE_HSTS_SECONDS=0
DJANGO_SECURE_HSTS_INCLUDE_SUBDOMAINS=false
DJANGO_SECURE_HSTS_PRELOAD=false

# Optional production filesystem allowlists.
# When these are empty in production, arbitrary path selection is staff-only.
# Prefer setting them to one or more operator-controlled roots.
#
# Windows examples:
# LIBRARYFORGE_ALLOWED_LIBRARY_ROOTS=\\192.168.10.178\media-library,D:\Media
# LIBRARYFORGE_ALLOWED_OUTPUT_ROOTS=D:\LibraryForgeOutputs
#
# Linux examples:
# LIBRARYFORGE_ALLOWED_LIBRARY_ROOTS=/mnt/media,/srv/media
# LIBRARYFORGE_ALLOWED_OUTPUT_ROOTS=/mnt/libraryforge-output

LIBRARYFORGE_LOGIN_MAX_FAILURES=8
LIBRARYFORGE_LOGIN_IP_MAX_FAILURES=40
LIBRARYFORGE_LOGIN_WINDOW_SECONDS=300
LIBRARYFORGE_MAX_NFO_BYTES=10485760

LIBRARYFORGE_RESTART_ENABLED=false
# LIBRARYFORGE_RESTART_FILE=C:\path\to\LibraryForge\runtime\restart.request

POSTGRES_DB=libraryforge
POSTGRES_USER=libraryforge
POSTGRES_PASSWORD=change-me
POSTGRES_HOST=127.0.0.1
POSTGRES_PORT=5432