From c0f1f04fc954c76ef9ab0bc77f322c7c9877e287 Mon Sep 17 00:00:00 2001
From: Alex Zaw <me@alexzaw.dev>
Date: Mon, 6 Apr 2026 18:04:49 +0000
Subject: [PATCH] Add environment variables template

---
 .env.example | 65 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 65 insertions(+)
 create mode 100644 .env.example

diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..46468eb
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,65 @@
+# ONLYOFFICE Docs Environment Configuration
+# Copy this file to .env and customize for your deployment
+
+# =============================================================================
+# REQUIRED SETTINGS
+# =============================================================================
+
+# JWT Secret Key (REQUIRED)
+# Generate a strong random string: openssl rand -hex 32
+ONLYOFFICE_JWT_SECRET=change-me-to-a-secure-random-string
+
+# =============================================================================
+# RUNTIPI VARIABLES (auto-populated by Runtipi)
+# =============================================================================
+
+# App port - change if 8044 is already in use
+APP_PORT=8044
+
+# App data directory (set by Runtipi)
+# APP_DATA_DIR=/path/to/runtipi/app-data/onlyoffice-docs
+
+# Domain configuration (set by Runtipi)
+# APP_DOMAIN=onlyoffice-docs.yourdomain.com
+# LOCAL_DOMAIN=tipi.lan
+
+# =============================================================================
+# OPTIONAL: JWT SETTINGS
+# =============================================================================
+
+# Enable JWT authentication (recommended: true)
+ONLYOFFICE_JWT_ENABLED=true
+
+# JWT HTTP header name
+ONLYOFFICE_JWT_HEADER=Authorization
+
+# Allow JWT token in request body
+ONLYOFFICE_JWT_IN_BODY=false
+
+# =============================================================================
+# OPTIONAL: STORAGE & INTEGRATION
+# =============================================================================
+
+# Accept self-signed SSL certificates from storage server
+# Enable this if using self-signed certs with Nextcloud/ownCloud
+ONLYOFFICE_USE_UNAUTHORIZED_STORAGE=false
+
+# Enable WOPI protocol for Microsoft Office integration
+ONLYOFFICE_WOPI_ENABLED=false
+
+# =============================================================================
+# OPTIONAL: EXTERNAL DATABASE (for docker-compose.external-db.yml)
+# =============================================================================
+
+# PostgreSQL password for external database setup
+ONLYOFFICE_DB_PASSWORD=onlyoffice
+
+# =============================================================================
+# OPTIONAL: LETS ENCRYPT (for standalone HTTPS, not needed with Traefik)
+# =============================================================================
+
+# Domain for Let's Encrypt certificate
+# LETS_ENCRYPT_DOMAIN=docs.yourdomain.com
+
+# Admin email for Let's Encrypt
+# LETS_ENCRYPT_MAIL=admin@yourdomain.com