# Host ports (maps to the nginx container)
HTTP_PORT=80
HTTPS_PORT=443
TZ=UTC

# Browser origins allowed to call the API (comma-separated). Required in production.
# Docker Compose defaults this for local https://localhost access; override for your domain.
# CORS_ORIGIN=https://manager.example.com,http://localhost:3000

# Database
DB_PASSWORD=mikrotik_secure_pw

# JWT Authentication (change to a long random string)
JWT_SECRET=changeme_use_a_long_random_secret_at_least_32_chars

# Device password encryption key (must be exactly 32 characters)
ENCRYPTION_KEY=changeme32byteslongencryptionkey

# InfluxDB
INFLUXDB_TOKEN=mytoken123456789
INFLUXDB_ORG=mikrotik-manager
INFLUXDB_BUCKET=metrics
INFLUXDB_ADMIN_PASSWORD=admin_password_123

# ─── Poller tuning (see GET /api/system/poller) ──────────────────────────────
# Raise concurrency if `headroom` in the poller health endpoint drops near 1.0 —
# below that the queue grows every cycle and devices go stale.
# POLLER_CONCURRENCY=12
# POLLER_JOB_TIMEOUT_MS=45000
# POLLER_INTERVAL_MS=30000
# POLLER_JOB_RETENTION_SEC=3600
# POLLER_JOB_RETENTION_COUNT=5000

# Redis memory ceiling. Only TTL-bearing keys are evicted (volatile-lru), so
# queued jobs are never discarded; the cap exists to protect the host.
# REDIS_MAXMEMORY=512mb