# 复制为 .env 后更换密码和密钥；不要提交 .env 到版本库
SITEFORGE_PORT=8787
SITEFORGE_ADMIN_PASSWORD=REPLACE_WITH_STRONG_PASSWORD
SITEFORGE_SESSION_SECRET=REPLACE_WITH_64_RANDOM_CHARACTERS
SITEFORGE_COOKIE_SECURE=false

# 只有启用 compose.public.yaml 时才需要填写，先正确设置 DNS 记录
SITEFORGE_DOMAIN=siteforge.example.com

# Enterprise-only (compose.enterprise.yaml)
SITEFORGE_PG_USER=siteforge
SITEFORGE_PG_PASSWORD=GENERATE_STRONG_URL_SAFE_PASSWORD
SITEFORGE_PG_DB=siteforge
# Must be HTTPS and trusted deployment endpoint; never set to an arbitrary user URL
SITEFORGE_DEPLOY_STAGING_URL=
SITEFORGE_DEPLOY_STAGING_SECRET=
SITEFORGE_DEPLOY_PRODUCTION_URL=
SITEFORGE_DEPLOY_PRODUCTION_SECRET=
# Release agent is deployed as an isolated service on the receiving host
SITEFORGE_DEPLOY_SECRET=

# P1 task-queue capacity and safe outbound HTTP policy
SITEFORGE_MAX_PENDING_JOBS=100
SITEFORGE_MAX_PENDING_JOBS_PER_SITE=5
SITEFORGE_OUTBOUND_PORTS=80,443

# V8.5 restricted MySQL importer. Empty allowlists disable MySQL access.
# Example values, only enable an approved server + an actual SELECT-only user.
SITEFORGE_MYSQL_ALLOWED_HOSTS=
SITEFORGE_MYSQL_ALLOWED_TABLES=
# Optional CA path inside Worker. Mount certificate into Worker when using custom CA.
SITEFORGE_MYSQL_CA_FILE=
# Credential names should be secrets in Worker, not plaintext from the browser.
# SITEFORGE_MYSQL_READ_USER=<use Docker secret instead>
# SITEFORGE_MYSQL_READ_PASSWORD=<use Docker secret instead>
# Preferred remote signing secret reference (instead of plaintext _SECRET)
# SITEFORGE_DEPLOY_STAGING_SECRET_REF=env:SITEFORGE_DEPLOY_STAGING_SECRET
# SITEFORGE_DEPLOY_PRODUCTION_SECRET_REF=file:siteforge_deploy_production