.env.docker.example

# Local-only port bindings. Expose through an authenticated gateway in production.
BIND_ADDRESS=127.0.0.1
API_PORT=3000
DASHBOARD_PORT=3001
MOCK_HOOK_PORT=3101
# Add the external dashboard hostname for shared deployments; no wildcards.
DASHBOARD_ALLOWED_HOSTS=127.0.0.1,localhost,[::1]

# Replace these local-only defaults before any shared or production deployment.
# Generate independent values with: openssl rand -hex 32
DB_DATABASE=waitqueue
DB_USER=waitqueue
DB_PASSWORD='replace-with-a-strong-password'
DB_ROOT_PASSWORD='replace-with-a-different-strong-password'

# Optional application boundary. Empty values preserve the local compatibility mode.
# Generate a shared API token with: openssl rand -hex 32
WAITQUEUE_API_TOKEN=
# Comma-separated exact origins, for example: https://worker.example.com
HOOK_URL_ALLOWLIST=
# Development only. Keep false in shared and production environments.
HOOK_URL_ALLOW_PRIVATE=false
REQUEST_BODY_LIMIT_BYTES=32768
RATE_LIMIT_MAX_REQUESTS=0
RATE_LIMIT_WINDOW_MS=60000

# Delivery reliability. The claim lease must be longer than HOOK_TIMEOUT_MS.
TASK_CLAIM_LEASE_MS=60000
TASK_MAX_RETRIES=5
TASK_RETRY_BASE_DELAY_MS=1000
TASK_RETRY_MAX_DELAY_MS=60000

# Scheduler settings
HOOK_TIMEOUT_MS=10000
CHECK_TASK_DIFF_CRON=0 * * * * *
CRON_TIMEZONE=Asia/Shanghai