# The one and only account. Both are checked in constant time on login.
DIARY_USER=narl
DIARY_PASSWORD=change-me

# Signs session cookies. Rotate it to log every device out. 32+ random chars.
# Generate one with: openssl rand -base64 32
DIARY_SECRET=replace-with-32-random-characters

# Where the SQLite database and uploaded media live.
DIARY_DATA_DIR=./data

# Address to listen on. Put a TLS terminating reverse proxy in front of this.
DIARY_BIND=127.0.0.1:4242

# How long a login lasts, in days.
DIARY_SESSION_DAYS=30

# Largest single upload, in megabytes.
DIARY_MAX_UPLOAD_MB=64

# Set to 1 once the app is served over HTTPS, so the cookie gets `Secure`.
DIARY_SECURE_COOKIE=0

# --- Proton Drive backup -----------------------------------------------------
# Off until `narl-diary proton-login` stores a session under DIARY_DATA_DIR.
# These only shape how often the mirror runs.

# The device the server registers in Proton Drive; its sync root is the folder
# the diary is mirrored into.
DIARY_PROTON_DEVICE=narl-diary

# Backstop between runs, in minutes. 0 leaves it change-driven only.
DIARY_BACKUP_INTERVAL_MIN=60

# How long the diary must be quiet after a change before it is mirrored, so a
# writing session uploads once rather than after every save.
DIARY_BACKUP_DEBOUNCE_SEC=300

# Set to 1 to let a deletion here trash the mirrored file there. Off by
# default: a backup that forgets on command is one accident from being none.
DIARY_BACKUP_PRUNE=0