# ONLYOFFICE Docs Environment Configuration
# Copy this file to .env and customize for your deployment

# =============================================================================
# STANDALONE DEPLOYMENT (docker-compose.standalone.yml)
# =============================================================================
# Use these variables when running ONLYOFFICE Docs independently without Runtipi

# JWT Secret Key (REQUIRED)
# Generate a strong random string: openssl rand -hex 32
JWT_SECRET=change-me-to-a-secure-random-string

# Port to expose (default: 8044)
ONLYOFFICE_PORT=8044

# Enable JWT authentication (recommended: true)
JWT_ENABLED=true

# JWT HTTP header name
JWT_HEADER=Authorization

# Allow JWT token in request body
JWT_IN_BODY=false

# Accept self-signed SSL certificates from storage server
# Enable this if using self-signed certs with Nextcloud/ownCloud
USE_UNAUTHORIZED_STORAGE=false

# Enable WOPI protocol for Microsoft Office integration
WOPI_ENABLED=false

# =============================================================================
# STANDALONE WITH EXTERNAL DB (docker-compose.standalone-external-db.yml)
# =============================================================================

# PostgreSQL password
DB_PASSWORD=onlyoffice

# =============================================================================
# LETS ENCRYPT (for standalone HTTPS)
# =============================================================================

# Domain for Let's Encrypt certificate
# LETS_ENCRYPT_DOMAIN=docs.yourdomain.com

# Admin email for Let's Encrypt
# LETS_ENCRYPT_MAIL=admin@yourdomain.com

# =============================================================================
# RUNTIPI DEPLOYMENT (docker-compose.yml)
# =============================================================================
# These variables are auto-populated by Runtipi when installed via the app store.
# You don't need to set these manually for standalone deployments.

# ONLYOFFICE_JWT_SECRET=
# ONLYOFFICE_JWT_ENABLED=true
# ONLYOFFICE_JWT_HEADER=Authorization
# ONLYOFFICE_JWT_IN_BODY=false
# ONLYOFFICE_USE_UNAUTHORIZED_STORAGE=false
# ONLYOFFICE_WOPI_ENABLED=false
# APP_PORT=8044
# APP_DATA_DIR=/path/to/runtipi/app-data/onlyoffice-docs
# APP_DOMAIN=onlyoffice-docs.yourdomain.com
# LOCAL_DOMAIN=tipi.lan