.env.example

NODE_ENV=development
PORT=3000
PUBLIC_ORIGIN=http://localhost:3000
DISCORD_CLIENT_ID=REPLACE_WITH_APPLICATION_ID
DISCORD_CLIENT_SECRET=REPLACE_WITH_OAUTH_CLIENT_SECRET
DISCORD_BOT_TOKEN=REPLACE_WITH_BOT_TOKEN
DATABASE_URL=postgresql://guard:replace-this-password@localhost:5432/guard
# Generate: node -e "console.log(require('crypto').randomBytes(32).toString('base64'))"
CREDENTIAL_MASTER_KEY=REPLACE_WITH_BASE64_32_BYTE_KEY
OBJECT_DIR=./objects
JEV_MODEL=jev-1.14.0
# 1 = starts API without Gateway/worker, for development only; not a demo authentication bypass.
API_ONLY=0
# Operator attestation only AFTER docs/ACCEPTANCE.md gates pass. Leave disabled.
ACCEPTANCE_APPROVED=0

# URL-safe hexadecimal password for the bundled PostgreSQL service.
POSTGRES_PASSWORD=replace-this-password

# MySQL alternative: omit DATABASE_URL to use host-provided DB_* variables.
# DB_HOST=localhost
# DB_PORT=3306
# DB_NAME=guard
# DB_USER=guard
# DB_PASSWORD=REPLACE_WITH_DATABASE_PASSWORD
# Enable after checking the provider TLS guide; DB_SSL_CA is an optional PEM CA.
# DB_SSL=1
# DB_SSL_CA=
# Opt-in first-boot migration; turn off after an authorized successful migration.
MIGRATE_ON_START=0

# Local ceilings, not published Discord/Jev entitlements. Shared database required.
DISCORD_MIN_INTERVAL_MS=40
JEV_MIN_INTERVAL_MS=1000
JEV_DAILY_REQUEST_LIMIT=1000
JEV_ACCOUNT_SCOPE=deployment