.env.example

# =============================================================================
# PIA-BACK Environment Configuration
# =============================================================================
# Copy this file as .env and fill in your values.

# -----------------------------------------------------------------------------
# Application Settings
# -----------------------------------------------------------------------------

# Rails environment (development, test, production)
RAILS_ENV=

# Default host for URL generation
DEFAULT_HOST=

# -----------------------------------------------------------------------------
# Authentication & Authorization
# -----------------------------------------------------------------------------

# Enable Pundit authorization (true to enable role-based access control)
# Leave empty or false to disable authentication
ENABLE_AUTHENTICATION=

# Devise secret key for encryption (generate with: rails secret)
# REQUIRED in production
DEVISE_SECRET_KEY=

# Devise pepper for additional password security (generate with: rails secret)
# REQUIRED in production
DEVISE_PEPPER=

# -----------------------------------------------------------------------------
# LDAP Configuration (optional - for LDAP authentication)
# -----------------------------------------------------------------------------

# Enable LDAP debug logging (true/false)
DEVISE_LDAP_LOGGER=

# Use admin credentials to bind to LDAP (true/false)
DEVISE_LDAP_LOGGER_ADMIN_BIND=

# -----------------------------------------------------------------------------
# CORS (Cross-Origin Resource Sharing)
# -----------------------------------------------------------------------------

# Allowed origins for CORS (comma-separated list)
# Use * for development, specific domains for production
# Example: http://localhost:4200,https://pia-app.example.com
ALLOWED_CORS_ORIGINS=*

# -----------------------------------------------------------------------------
# Security - HTML Sanitization (optional)
# -----------------------------------------------------------------------------

# Allowed HTML tags for user input sanitization
SANITIZED_ALLOWED_TAGS="strong b em i ul ol li br a div span img h1 h2 h3 h4 h5 h6 p"

# Allowed HTML attributes for user input sanitization
SANITIZED_ALLOWED_ATTRIBUTES="href style"

# -----------------------------------------------------------------------------
# Email Configuration (optional - for production)
# -----------------------------------------------------------------------------

# SMTP settings for sending emails
# EMAIL_FROM=noreply@example.com
# SMTP_ADDRESS=smtp.example.com
# SMTP_PORT=587
# SMTP_DOMAIN=example.com
# SMTP_USERNAME=your-smtp-username
# SMTP_PASSWORD=your-smtp-password
# SMTP_AUTHENTICATION=plain
# SMTP_ENABLE_STARTTLS_AUTO=true

# -----------------------------------------------------------------------------
# Rails Secret Key Base (REQUIRED in production)
# -----------------------------------------------------------------------------

# Generate with: rails secret
# SECRET_KEY_BASE=