# Copy this file to .env and adjust values before running `docker compose up`.

# --- Postgres ---
AURUM_POSTGRES_USER=aurum
AURUM_POSTGRES_PASSWORD=change-me
AURUM_POSTGRES_DB=aurum
AURUM_POSTGRES_HOST=db
AURUM_POSTGRES_PORT=5432

# --- Backend ---
# Comma-separated list of browser origins allowed to call the API. Leave it
# empty unless you serve the frontend from a different origin than the API:
# docker compose serves both from the same nginx, and the Vite dev server
# proxies /api, so neither needs this. "*" is honoured but then credentials
# are never granted, because "*" plus credentials lets any site you visit
# read this instance.
AURUM_CORS_ORIGINS=
AURUM_DEFAULT_CURRENCY=USD

# --- Crypto tab (live prices via CoinGecko) ---
# Free Demo API key, no card required: coingecko.com/en/api/pricing. Leave
# blank and the Crypto tab's price sync just 400s with a message telling
# you to set this — nothing else in the app is affected.
AURUM_COINGECKO_API_KEY=

# --- Basic auth (STRONGLY recommended if this instance is reachable from
# anywhere other than your own machine) ---
# Aurum has no login system of its own — it's built for one person
# self-hosting their own private instance, not a multi-tenant service.
# Leave both blank and there is NO password on this app at all: anyone who
# can reach it can read, edit, and delete every transaction, account, and
# asset. Set both to put an HTTP Basic Auth prompt in front of the whole
# app (UI + API). See frontend/docker-entrypoint.d/20-basic-auth.sh.
AURUM_BASIC_AUTH_USER=
AURUM_BASIC_AUTH_PASSWORD=

# --- Ports exposed on your host machine ---
AURUM_WEB_PORT=3000