dokploy.client-preview.env.example

# Required secrets. Generate unique values in Dokploy; never commit real values.
POSTGRES_PASSWORD=replace-with-a-long-alphanumeric-password
REDIS_PASSWORD=replace-with-a-long-alphanumeric-password
JWT_SECRET=replace-with-at-least-48-random-bytes

# Client preview images and public URLs.
IMAGE_TAG=client-preview
PUBLIC_APP_URL=https://preview.sovandara.lol
NEXT_PUBLIC_BASE_URL=https://api-preview.sovandara.lol
NEXT_PUBLIC_REALTIME_URL=https://realtime-preview.sovandara.lol

# Staging permits the mock payment provider. Production requires Bakong.
APP_ENV=staging
PAYMENT_PROVIDER=mock

# Per-process pgx pools: 2 API instances + 1 worker connect through PgBouncer
# (transaction pooling), not directly to Postgres, so these can be generous —
# PgBouncer's own DEFAULT_POOL_SIZE below is what actually bounds real
# Postgres backend connections (max_connections=60).
DATABASE_MAX_CONN=20
WORKER_DATABASE_MAX_CONN=10
PGBOUNCER_MEMORY_LIMIT=96m
PGBOUNCER_CPU_LIMIT=0.25
PGBOUNCER_MAX_CLIENT_CONN=1000
PGBOUNCER_DEFAULT_POOL_SIZE=20
GATEWAY_MEMORY_LIMIT=128m
GATEWAY_CPU_LIMIT=0.25

# Rate limits (Redis fixed window) and the metrics port — defaults shown,
# uncomment to override. Metrics are Docker-network-only, never published
# through Traefik.
# RATE_LIMIT_LOGIN_MAX=10
# RATE_LIMIT_LOGIN_WINDOW=15m
# RATE_LIMIT_REGISTRATION_MAX=5
# RATE_LIMIT_REGISTRATION_WINDOW=1m
# RATE_LIMIT_EVENTS_READ_MAX=100
# RATE_LIMIT_EVENTS_READ_WINDOW=1m
# RATE_LIMIT_PAYMENT_VERIFY_MAX=5
# RATE_LIMIT_PAYMENT_VERIFY_WINDOW=1m
# METRICS_PORT=9091

# Start with persistent local uploads, or set this to r2 and provide all R2 values.
OBJECT_STORAGE_PROVIDER=local
R2_ENDPOINT=
R2_BUCKET=
R2_ACCESS_KEY_ID=
R2_SECRET_ACCESS_KEY=
R2_PUBLIC_BASE_URL=

# Optional integrations.
GOOGLE_OAUTH_CLIENT_ID=
GOOGLE_OAUTH_CLIENT_SECRET=
GOOGLE_OAUTH_REDIRECT_URL=
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASSWORD=
SMTP_FROM=
TELEGRAM_BOT_TOKEN=
TELEGRAM_BOT_USERNAME=
TELEGRAM_WEBHOOK_SECRET=