.env.example

# Copy to .env and fill in before: docker compose up -d

# PostgreSQL (required)
DATABASE_URL=postgresql://recall:recall@postgres:5432/recall

# JWT RS256 key pair (required when AUTH_LEGACY_API_KEY=false)
# Generate with:
#   openssl genrsa -out jwt-private.pem 2048
#   openssl rsa -in jwt-private.pem -pubout -out jwt-public.pem
# Paste PEM contents or use \n-escaped single-line values
JWT_PRIVATE_KEY=
JWT_PUBLIC_KEY=

# Legacy shared API key — set true only during extension migration window
RECALL_API_KEY=
AUTH_LEGACY_API_KEY=false
BOOTSTRAP_USER_EMAIL=bootstrap@recall.local

# Host port exposed on the server
RECALL_PORT=7878

# CORS (optional). Use * for development or list origins comma-separated.
RECALL_CORS_ORIGINS=*

# Set true when running behind nginx, Caddy, or a cloud load balancer
TRUST_PROXY=false

# Fireworks AI API key (optional — used by Identity & Career module)
FIREWORKS_API_KEY=

# Firecrawl API key (required for document extraction and docs crawl)
FIRECRAWL_API_KEY=
FIRECRAWL_MAX_CRAWL_PAGES=25
RESEARCH_MAX_CRAWL_PAGES=12
RESEARCH_MAX_SEARCH_RESULTS=5
DOC_EXTRACT_MIN_CLIENT_CHARS=800

# Cloudflare R2 object storage (optional — falls back to local RECALL_HOME)
# R2_ENDPOINT=
# R2_BUCKET=
# R2_ACCESS_KEY_ID=
# R2_SECRET_ACCESS_KEY=
# R2_PUBLIC_BASE_URL=

# Rate limiting
RATE_LIMIT_WINDOW_MS=60000
RATE_LIMIT_MAX=100

# Public URL for email links (verify, reset, change email)
PUBLIC_BASE_URL=http://40.81.245.21:7878

# SMTP (required for real emails in production)
# Gmail example: smtp.gmail.com, port 587, SMTP_SECURE=false, use App Password
SMTP_HOST=
SMTP_PORT=587
SMTP_SECURE=false
SMTP_USER=
SMTP_PASS=
SMTP_FROM=Recall <noreply@yourdomain.com>

# Log verification/reset links to server console when SMTP is not configured
EMAIL_DEV_LOG=true

# PUPPETEER_SKIP_DOWNLOAD=true
# PUPPETEER_EXECUTABLE_PATH=C:\Program Files\Google\Chrome\Application\chrome.exe