.env.example

# Local development example. The binary does not load this file automatically;
# export these variables in your shell or service environment.
DATABASE_URL=postgres://localhost/horae
HORAE_HOST=127.0.0.1
HORAE_PORT=3000
HORAE_LOG=info

# Durable jobs: total attempts including the first run (1..100). Applies only
# to new jobs; queued jobs and manual retries retain their original limit.
HORAE_JOB_MAX_ATTEMPTS=5

# Optional budget email: set both values or leave both blank. The path must be
# an absolute executable (not a shell command), accepting sendmail -i -f FROM -- TO.
# Example: /absolute/path/to/sendmail and alerts@example.com. Mailboxes use plain
# ASCII local parts (letters, digits, dot, underscore, plus, hyphen), without display names.
# Each attempt has a 20-second deadline; after five unsuccessful attempts the
# outbox retains failed_at/last_error. Exit zero acknowledges local transport
# acceptance, not receipt. An interrupted acknowledgement may cause a duplicate.
HORAE_SENDMAIL_PATH=
HORAE_MAIL_FROM=

# Local admin bypass only. Production: DEV_LOGIN=0 and HTTPS with secure cookies.
DEV_LOGIN=1
HORAE_SECURE_COOKIES=0

# OIDC requires all four non-empty values. Register the exact public callback
# URL with the provider, ending in /auth/callback.
HORAE_OIDC_ISSUER=
HORAE_OIDC_CLIENT_ID=
HORAE_OIDC_CLIENT_SECRET=
HORAE_OIDC_REDIRECT_URL=
HORAE_OIDC_ADDITIONAL_AUDIENCES=
HORAE_OIDC_BUTTON_LABEL=

HORAE_PLUGINS_DIR=plugins
# Optional separate unprivileged database login; blank disables plugin SQL.
HORAE_PLUGIN_DATABASE_URL=

# Optional Harvest import: all four values are required. Its callback ends in
# /auth/harvest/callback. The encryption key is 32 bytes encoded as 64 hex digits.
HORAE_HARVEST_CLIENT_ID=
HORAE_HARVEST_CLIENT_SECRET=
HORAE_HARVEST_REDIRECT_URL=
HORAE_HARVEST_ENC_KEY=