# Copy this file to .env and fill in the required values.
# Docker Compose loads .env automatically — no extra flags needed.

# ── Required ───────────────────────────────────────────────────────────────────

# Public hostname of this spindle (e.g. spindle.example.com or 192.0.2.1)
SPINDLE_SERVER_HOSTNAME=

# ATProto DID of the spindle owner
# Find yours: https://bsky.app → Settings → Privacy and Security → Advanced
SPINDLE_SERVER_OWNER=

# ── Ports (host-side bindings) ─────────────────────────────────────────────────

# Port Spindle listens on (host)
SPINDLE_PORT=6555

# Port OpenBao server is exposed on (host) — remove the openbao ports: mapping in
# docker-compose.yml if you don't need local CLI/API access
OPENBAO_PORT=8200

# ── Advanced (safe to leave as-is) ────────────────────────────────────────────

# Address Spindle binds inside the container
SPINDLE_SERVER_LISTEN_ADDR=0.0.0.0:6555

# Path to the Spindle SQLite database inside the container
SPINDLE_SERVER_DB_PATH=/data/spindle.db

# Directory for pipeline logs inside the container
SPINDLE_PIPELINES_LOG_DIR=/var/log/spindle

# Secrets backend — only "openbao" is supported
SPINDLE_SERVER_SECRETS_PROVIDER=openbao

# Internal address of the OpenBao proxy sidecar (do not change unless you rename the service)
SPINDLE_SERVER_SECRETS_OPENBAO_PROXY_ADDR=http://openbao-proxy:8201

# KV v2 mount name created by init-openbao.sh
SPINDLE_SERVER_SECRETS_OPENBAO_MOUNT=spindle