| 1 |
# Required |
| 2 |
DATABASE_URL=postgres:///multithreaded |
| 3 |
OAUTH_CLIENT_ID=your-oauth-client-id |
| 4 |
|
| 5 |
# Optional (defaults shown) |
| 6 |
MNW_BASE_URL=http://127.0.0.1:3000 |
| 7 |
OAUTH_REDIRECT_URI=http://127.0.0.1:3400/auth/callback |
| 8 |
# Bind loopback by default. Rate limiting trusts X-Forwarded-For, which is only |
| 9 |
# safe behind a reverse proxy that OVERWRITES that header (Caddy must set, not |
| 10 |
# append, X-Forwarded-For / X-Real-IP). Only set 0.0.0.0 if the port is meant to |
| 11 |
# be directly reachable (e.g. a tailnet-direct staging box). |
| 12 |
HOST=127.0.0.1 |
| 13 |
PORT=3400 |
| 14 |
COOKIE_SECURE=true |
| 15 |
RUST_LOG=info |
| 16 |
|
| 17 |
# Platform admin (UUID of the MNW account that can access /_admin) |
| 18 |
# PLATFORM_ADMIN_ID=00000000-0000-0000-0000-000000000000 |
| 19 |
|
| 20 |
# S3 storage (optional — required for image uploads) |
| 21 |
# S3_ENDPOINT=https://s3.us-east-1.amazonaws.com |
| 22 |
# S3_BUCKET=mt-uploads |
| 23 |
# S3_ACCESS_KEY=your-access-key |
| 24 |
# S3_SECRET_KEY=your-secret-key |
| 25 |
# S3_REGION=us-east-1 |
| 26 |
|
| 27 |
# Internal API shared secret (HMAC-SHA256 auth for MNW → MT calls) |
| 28 |
# INTERNAL_SHARED_SECRET=your-shared-secret |
| 29 |
|