# ============================================================
# lokistack - Environment Variables Example
# ============================================================
# Copy this file to .env and fill in your values:
#   cp .env.example .env
#
# IMPORTANT: Never commit .env to version control!
# .env should be in .gitignore
# ============================================================

# ---- Required: Security Keys ----
# Generate with: openssl rand -hex 32
JWT_SECRET=

# Generate with: openssl rand -hex 32
ENCRYPTION_KEY=

# ---- Optional: 首次启动的管理员密码 ----
# 不设置则自动生成 16 位随机密码，写入数据卷 initial-admin-password.txt 并打印到首次启动日志
# 设置后跳过随机生成（适合自动化部署 / 需要固定密码的场景）
# 登录后请立即修改；admin 改密成功后自动删除 initial-admin-password.txt
ADMIN_INIT_PASSWORD=

# ---- Optional: Paths ----
# Host path to kubeconfig directory (default: ~/.kube)
KUBECONFIG_PATH=~/.kube

# Host path to SSH keys (default: ~/.ssh)
SSH_KEY_PATH=~/.ssh

# ---- Optional: Network ----
SERVER_PORT=8080

# ---- Optional: Build ----
TARGETARCH=amd64
# For Apple Silicon Macs: TARGETARCH=arm64

# ---- Production Only ----
# Paths to secret files for docker-compose.prod.yml
JWT_SECRET_FILE_PATH=./secrets/jwt_secret.txt
ENCRYPTION_KEY_FILE_PATH=./secrets/encryption_key.txt