# --- Postgres ---
POSTGRES_DB=lambdamail
POSTGRES_USER=lambdamail
POSTGRES_PASSWORD=change-me-in-local-dev

# --- Redis ---
REDIS_PASSWORD=change-me-in-local-dev

# --- Shared secrets (local dev values — never reuse in production) ---
JWT_SECRET=local-dev-jwt-secret-change-me
LAMBDAMAIL_MASTER_KEY=local-dev-master-key-32-bytes-min

# --- Cloudflare (optional in F0 — DNS automation lands in F3) ---
CLOUDFLARE_API_TOKEN=

# --- Host identity ---
PRIMARY_MAIL_HOST=mail.localhost
PUBLIC_IPV4=127.0.0.1
PUBLIC_IPV6=

# --- TLS (F0 has no real certs — protocols stub reports degraded, never crashes) ---
TLS_MODE=traefik
COOLIFY_PROXY_DIR=./local/acme
PROTOCOLS_CERT_PATH=/etc/lambdamail/certs/cert.pem
PROTOCOLS_KEY_PATH=/etc/lambdamail/certs/key.pem
PROTOCOLS_SPOOL_DIR=/var/lambdamail/spool

# --- Webmail ---
WEBMAIL_HOST=localhost:3000
ADMIN_HOST=