.env.example

# Storage backend: "sqlite" or "redis"
STORAGE_BACKEND=sqlite

# SQLite (used when STORAGE_BACKEND=sqlite)
SQLITE_PATH=./ghostbit.db
# Docker / production: SQLITE_PATH=/data/ghostbit.db

# Connection pool size. WAL mode lets several readers progress in parallel;
# SQLite serializes writers internally. Bump if
# `ghostbit_sqlite_pool_wait_seconds` P99 shows contention.
# SQLITE_POOL_SIZE=5

# Redis (used when STORAGE_BACKEND=redis)
REDIS_URL=redis://localhost:6379
# Optional Redis password. If set, injected into REDIS_URL automatically.
# For an external Redis that already includes credentials in the URL, leave this empty.
# REDIS_PASSWORD=

# Max paste size in bytes (default: 524288 = 512 KB)
MAX_PASTE_SIZE=524288

# Webhook signing secret (optional).
# If set, every webhook delivery includes X-Ghostbit-Signature: sha256=<HMAC-SHA256>.
# Generate with: python3 -c "import secrets; print(secrets.token_hex(32))"
# WEBHOOK_SECRET=

# Rate limits (slowapi syntax: "N/period")
RATE_LIMIT_CREATE=30/minute
RATE_LIMIT_VIEW=120/minute

# Trust X-Forwarded-For for rate limiting. Enable ONLY when behind a
# reverse proxy. The *rightmost* XFF entry is used (the IP appended by the
# nearest hop), so the proxy itself decides the rate-limit key. For multi-
# hop setups (CDN → LB → app), configure the proxy to collapse the chain
# to a single trusted entry, otherwise the rightmost IP will be the LB and
# rate limits will apply globally rather than per-client.
TRUST_PROXY_HEADERS=false

# Public base URL — scheme + host, no trailing slash (e.g. https://paste.example.com).
# Builds the absolute URLs in social-preview meta tags (og:image, og:url) so
# link-unfurl bots (iMessage, Slack, …) can fetch the preview image. Leave empty
# to derive it from the request — set it when a TLS-terminating proxy would
# otherwise make the app advertise http:// URLs. A bad value fails fast at startup.
# BASE_URL=

# Repo whose stargazer count the footer shows, fetched server-side once an hour.
# Leave empty to disable the outbound call entirely (air-gapped deployments) —
# the footer then just links to GitHub without a number.
# GITHUB_REPO=stackopshq/ghostbit

# Server port (default: 8000)
PORT=8000