# Site settings. Set them in the container's environment (never commit real
# values). Read from process.env at run time only. See docs/site.md.

# --- Content service ----------------------------------------------------------
CONTENT_URL=http://localhost:4310
# Reader token: published notes, and the live store check for orders.
CONTENT_TOKEN=
# Intake token: files saved copies of inquiries and orders, can read nothing.
CONTENT_INTAKE_TOKEN=

# --- Forms: Cloudflare Turnstile ---------------------------------------------
# The widget shows on both forms when the site key is set.
PUBLIC_TURNSTILE_SITE_KEY=
# When set, a post without a valid token is turned down (fails closed if
# Cloudflare cannot be reached). Unset in local development.
TURNSTILE_SECRET_KEY=

# --- Forms: email (nodemailer over SMTP) --------------------------------------
# Without SMTP_HOST no email is sent; the saved copy in the admin Inbox stands.
SMTP_HOST=
SMTP_PORT=587
SMTP_USER=
SMTP_PASS=
SMTP_FROM=GregKilmer.com <no-reply@gregkilmer.com>
# Only for a relay on the same private network with a self-signed certificate.
SMTP_ALLOW_SELFSIGNED=false
CONTACT_TO=contact@gregkilmer.com
ORDER_TO=orders@gregkilmer.com

# --- Forms: limits --------------------------------------------------------------
# Posts per visitor address per window.
CONTACT_RATE_LIMIT=5
CONTACT_RATE_WINDOW_MIN=15
# ORDER_RATE_LIMIT and ORDER_RATE_WINDOW_MIN default to the CONTACT_ values.
# Largest inquiry attachment in MB; keep it at or under the content service's SUBMISSION_MAX_MB.
FORM_MAX_ATTACHMENT_MB=10