DATABASE_URL=postgres://dullahan:dullahan@localhost:5432/dullahan
BIND_ADDR=0.0.0.0:3001

# Require a Bearer token on /stats/*. Generate with: openssl rand -hex 24
# If unset, /stats/* is publicly readable (NOT recommended on the public internet).
# ADMIN_TOKEN=

# Comma-separated list of accepted site IDs. Unset = accept any site.
# ALLOWED_SITES=fole.dev,openbenchmark.dev

# Comma-separated origins allowed to call /stats/*. Unset = any origin.
# STATS_ORIGINS=https://stats.example.com

# Set to 1 once the server is fronted by HTTPS so HSTS is sent.
# BEHIND_TLS=1

# Opt-in anonymized sessions (unique visitors, bounce rate, browser/OS family).
# Off by default: with it off the server reads neither the client IP nor the
# User-Agent. See README "What gets collected" for the privacy details.
# SESSIONS_ENABLED=1

# Log format: text (default) or json (structured).
# LOG_FORMAT=json
# RUST_LOG=info,sqlx=warn

# Email (powers POST /contact). RESEND_API_KEY + EMAIL_FROM are both needed to
# enable outbound email; CONTACT_TO sets the recipient (without it /contact 503s).
# RESEND_API_KEY=re_...
# EMAIL_FROM=hello@example.com
# EMAIL_FROM_NAME=dullahan
# CONTACT_TO=hello@example.com
