# Application
APP_ENV=production
PUBLIC_BASE_URL=https://zefix.silias.ch
APP_SECRET=replace-with-output-of-openssl-rand-hex-32
ZEFIX_PRIVATE_DIR=/var/lib/zefix-export

# Cloudflare Turnstile
TURNSTILE_SECRET=replace-with-turnstile-secret
TURNSTILE_ALLOWED_HOSTNAME=zefix.silias.ch

# Zefix API
username=replace-with-zefix-api-username
password=replace-with-zefix-api-password

# SMTP
SMTP_HOST=mxe98c.netcup.net
SMTP_PORT=465
SMTP_SECURE=ssl
SMTP_USERNAME=info@silias.ch
smtppassword=replace-with-smtp-password
EXPORT_BCC_EMAIL=

# Abuse protection and job limits
RATE_LIMIT_IP_MAX=3
RATE_LIMIT_IP_WINDOW_SECONDS=900
RATE_LIMIT_EMAIL_MAX=5
RATE_LIMIT_EMAIL_WINDOW_SECONDS=86400
FORM_MIN_SECONDS=2
FORM_MAX_SECONDS=7200
MAX_SEATS_PER_JOB=500
MAX_LEGAL_FORMS_PER_JOB=50
MAX_REQUESTS_PER_JOB=5000
MAX_QUEUE_SIZE=20

# Retention and background processing
DOWNLOAD_RETENTION_HOURS=48
STALE_TASK_RETENTION_HOURS=168
REFERENCE_CACHE_SECONDS=86400
TASK_EXECUTOR_MAX_SECONDS=120
TASK_MIN_AGE_SECONDS=10

# Only add IP addresses of reverse proxies you control.
TRUSTED_PROXY_IPS=