.env.example

# ─────────────────────────────────────────────
# ServerCommander OS — Environment Configuration
# Generated by setup.sh — DO NOT EDIT MANUALLY
# ─────────────────────────────────────────────

# Application
NODE_ENV=production
NEXT_PUBLIC_APP_NAME="ServerCommander OS"
NEXT_PUBLIC_APP_VERSION="1.0.0"
PORT=3000
HOST_PORT=3000

# Security — replace with long random strings (setup.sh generates these)
SESSION_SECRET=REPLACE_WITH_64_CHAR_SECRET
JWT_SECRET=REPLACE_WITH_64_CHAR_SECRET
ENCRYPTION_KEY=REPLACE_WITH_32_CHAR_HEX_KEY

# Database (SQLite — path inside the container)
DATABASE_URL="file:/app/data/servercommander.db"

# Initial admin (used only during first-run seed)
ADMIN_USERNAME=admin
# Encrypted format (iv_hex:cipher_hex), decrypted at seed/runtime via ENCRYPTION_KEY
ADMIN_PASSWORD_ENC=REPLACE_WITH_ENCRYPTED_ADMIN_PASSWORD

# Docker socket path (default Linux path)
DOCKER_SOCKET=/var/run/docker.sock

# Host filesystem mount point inside the container
HOST_FS_MOUNT=/host_system

# Remote host access for terminal/files (optional)
# Set SSH_ENABLED=true to use SSH/SFTP backend instead of local host mount.
SSH_ENABLED=false
SSH_HOST=127.0.0.1
SSH_PORT=22
SSH_USERNAME=root
# Encrypted format (iv_hex:cipher_hex), decrypted at runtime via ENCRYPTION_KEY
SSH_PASSWORD_ENC=REPLACE_WITH_ENCRYPTED_SSH_PASSWORD
SSH_SFTP_ROOT=/

# SMTP / mail delivery (optional)
SMTP_ENABLED=false
SMTP_HOST=smtp.example.com
SMTP_PORT=587
SMTP_SECURE=false
SMTP_USERNAME=smtp-user@example.com
SMTP_PASSWORD_ENC=REPLACE_WITH_ENCRYPTED_SMTP_PASSWORD
SMTP_FROM_EMAIL=noreply@example.com
SMTP_USE_ALIAS=true
SMTP_FROM_NAME="ServerCommander Security"

# Session expiry in seconds (default 8 hours)
SESSION_MAX_AGE=28800

# Set to true only behind HTTPS reverse proxy
COOKIE_SECURE=true