# The one and only account. Both are checked in constant time on login.
DIARY_USER=narl
DIARY_PASSWORD=change-me

# Signs session cookies. Rotate it to log every device out. 32+ random chars.
# Generate one with: openssl rand -base64 32
DIARY_SECRET=replace-with-32-random-characters

# Where the SQLite database and uploaded media live.
DIARY_DATA_DIR=./data

# Address to listen on. Put a TLS terminating reverse proxy in front of this.
DIARY_BIND=127.0.0.1:4242

# How long a login lasts, in days.
DIARY_SESSION_DAYS=30

# Largest single upload, in megabytes.
DIARY_MAX_UPLOAD_MB=64

# Set to 1 once the app is served over HTTPS, so the cookie gets `Secure`.
DIARY_SECURE_COOKIE=0