example.env

# Frontend endpoints as seen by the browser.
# Per-worker resource budgets (production uses one backend worker).
MAX_OWNER_STORAGE_BYTES=33554432
MAX_HTTP_BODY_BYTES=10485760
MAX_HEAVY_REQUESTS=2
MAX_WS_CONNECTIONS_TOTAL=200
MAX_WS_CONNECTIONS_PER_IP=20
# Set the actual Docker gateway used by host nginx on the production machine.
# Keep the loopback default for local use; never use '*'.
FORWARDED_ALLOW_IPS=127.0.0.1

VITE_API_URL=http://localhost:9000/api
VITE_WS_URL=ws://localhost:9000

# Optional public links used by the canvas help and bug-report buttons.
VITE_HELP_URL=https://github.com/the-asind/RenPy-VisualEditor/blob/main/docs/quick-start.md
VITE_BUG_REPORT_URL=https://github.com/the-asind/RenPy-VisualEditor/issues/new?template=bug_report.yml&title=%5BBug%5D%20

# Required by the production backend configured in docker-compose.yml.
# Generate a real value before copying this file to .env, for example:
#   python -c "import secrets; print(secrets.token_urlsafe(48))"
JWT_SECRET_KEY=CHANGE_ME_WITH_A_LONG_RANDOM_VALUE

# Comma-separated explicit browser origins; wildcards are rejected in production.
CORS_ALLOW_ORIGINS=http://localhost:5137,http://127.0.0.1:5137

# Maximum number of projects one user may own. Shared projects do not consume it.
MAX_OWNED_PROJECTS_PER_USER=10

# Application-level safeguards. A reverse proxy should enforce global limits too.
MAX_WS_CONNECTIONS_PER_USER=5
MAX_WS_CONNECTIONS_PER_PROJECT=100
RATE_LIMIT_REGISTRATION_REQUESTS=10
RATE_LIMIT_REGISTRATION_WINDOW_SECONDS=3600
RATE_LIMIT_LOGIN_REQUESTS=30
RATE_LIMIT_LOGIN_WINDOW_SECONDS=60
RATE_LIMIT_PROJECT_CREATE_REQUESTS=30
RATE_LIMIT_PROJECT_CREATE_WINDOW_SECONDS=60
RATE_LIMIT_DEMO_PREVIEW_REQUESTS=120
RATE_LIMIT_DEMO_PREVIEW_WINDOW_SECONDS=60

# Required only on the standalone observability VPS.
GRAFANA_ADMIN_PASSWORD=CHANGE_ME_WITH_A_DIFFERENT_LONG_RANDOM_VALUE
# Per-connection incoming WebSocket traffic budget; fixed windows in seconds.
MAX_WS_MESSAGES_PER_WINDOW=300
MAX_WS_BYTES_PER_WINDOW=8388608
WS_RATE_WINDOW_SECONDS=10