.env.example

############################################
# cerberus panel environment template
############################################

### APP ###
APP_PORT=3000
APP_ADDRESS=0.0.0.0
APP_PATH=/panel
METRICS_ADDRESS=0.0.0.0
METRICS_PORT=3001
CERBERUS_ALLOW_INSECURE_HTTP=true
CERBERUS_TRUSTED_PROXIES=127.0.0.1/32,172.16.0.0/12,10.0.0.0/8

### API ###
# Possible values: max (all cores), number (exact worker count), -1 (all cores - 1)
API_INSTANCES=1

### DATABASE ###
# FORMAT: postgresql://{user}:{password}@{host}:{port}/{database}
DATABASE_URL="postgresql://postgres:postgres@cerberus-db:5432/postgres"
POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres
POSTGRES_DB=postgres

### REDIS ###
REDIS_HOST=cerberus-redis
REDIS_PORT=6379

### JWT ###
# Must be strong random strings
JWT_AUTH_SECRET=change_me
JWT_API_TOKENS_SECRET=change_me

### TELEGRAM NOTIFICATIONS ###
IS_TELEGRAM_NOTIFICATIONS_ENABLED=false
TELEGRAM_BOT_TOKEN=change_me
TELEGRAM_NOTIFY_USERS_CHAT_ID=change_me
TELEGRAM_NOTIFY_NODES_CHAT_ID=change_me
TELEGRAM_NOTIFY_CRM_CHAT_ID=change_me
# Optional topic IDs
TELEGRAM_NOTIFY_USERS_THREAD_ID=
TELEGRAM_NOTIFY_NODES_THREAD_ID=
TELEGRAM_NOTIFY_CRM_THREAD_ID=

### FRONT_END ###
# Used by CORS
FRONT_END_DOMAIN=localhost

### SUBSCRIPTION PUBLIC DOMAIN ###
# Domain without protocol, no trailing slash
SUB_PUBLIC_DOMAIN=localhost

### SWAGGER ###
SWAGGER_PATH=/docs
SCALAR_PATH=/scalar
IS_DOCS_ENABLED=false

### PROMETHEUS ###
METRICS_USER=admin
METRICS_PASS=change_me

### WEBHOOK ###
WEBHOOK_ENABLED=false
WEBHOOK_URL=https://your-webhook-url.com/endpoint
# Must be exactly 64 characters (a-z, A-Z, 0-9)
WEBHOOK_SECRET_HEADER=change_me

### BANDWIDTH NOTIFICATIONS ###
BANDWIDTH_USAGE_NOTIFICATIONS_ENABLED=false
BANDWIDTH_USAGE_NOTIFICATIONS_THRESHOLD=[60, 80]

### NOT CONNECTED USERS NOTIFICATIONS ###
NOT_CONNECTED_USERS_NOTIFICATIONS_ENABLED=false
NOT_CONNECTED_USERS_NOTIFICATIONS_AFTER_HOURS=[6, 24, 48]

### CLOUDFLARE (infra-only) ###
CLOUDFLARE_TOKEN=ey...