.env.template

# Database
## DATABASE_URL
DATABASE_URL=postgres://user:password@host:port/database
## OR
PGHOST=localhost
PGPORT=5444
PGDATABASE=arena
PGUSER=arena
PGPASSWORD=arena
PGSSL=false
PGSSL_ALLOW_UNAUTHORIZED=false
## Max time (ms) to wait for a pool connection before erroring (default: 30000)
PG_CONNECTION_TIMEOUT_MILLIS=30000
## DB Migrations
DISABLE_DB_MIGRATIONS=false
# Express
PORT=9090
TEMP_FOLDER=/tmp/arena_upload
USE_HTTPS=false
RATE_LIMIT_ENABLED=false
RATE_LIMIT_WINDOW_MS=900000
RATE_LIMIT_MAX=100
## File upload limit in bytes (default: 1GB)
FILE_UPLOAD_LIMIT=1073741824
## Optional local log folder used for rolling files and S3 shipping
LOG_FOLDER=./logs
LOG_MAX_SIZE_BYTES=10485760
LOG_RETENTION_DAYS=30
LOG_UPLOAD_INTERVAL_MS=60000
LOG_S3_PREFIX=logs
## Optional S3-backed log shipping (requires LOG_S3_ENABLED=true and file storage S3 to be enabled)
## Log files are uploaded under a per-instance S3 prefix (LOG_S3_PREFIX/<instanceId>/...) to avoid
## different instances overwriting each other's logs. The instance id is taken from DYNO (set
## automatically by Heroku) or HOSTNAME, falling back to the OS hostname; no manual setup is usually needed.
LOG_S3_ENABLED=false
FILE_STORAGE_AWS_ACCESS_KEY=
FILE_STORAGE_AWS_SECRET_ACCESS_KEY=
FILE_STORAGE_AWS_S3_BUCKET_NAME=
FILE_STORAGE_AWS_S3_BUCKET_REGION=
# Security - IMPORTANT: Use strong random secrets in production (e.g., 64+ character random string)
USER_AUTH_TOKEN_SECRET=user-auth-token-secret
USER_2FA_SECRET=user-2fa-secret
# Experimental features
EXPERIMENTAL_FEATURES=false