# Minimum 32 random characters, e.g. openssl rand -base64 48
APP_SECRET=CHANGE_ME_TO_A_LONG_RANDOM_SECRET
LISTEN_ADDR=0.0.0.0:8080
HTTPS_ONLY=true
# Verbose per-cycle stats-collector logging (raw TS3 reading vs what got
# written to the RRD). Noisy, meant for troubleshooting only.
DEBUG=false

# Origins allowed to embed /embed/channel in an iframe. Space-separated, origins only.
FRAME_ANCESTORS=https://www.example.org

# Set only reverse-proxy networks you operate. Leave empty if app is directly exposed.
TRUSTED_PROXIES=172.16.0.0/12

TS_QUERY_HOST=127.0.0.1
TS_QUERY_PORT=10011
TS_QUERY_USER=CHANGE_ME
TS_QUERY_PASSWORD=CHANGE_ME
TS_VOICE_HOST=linuxiarz.pl
TS_VOICE_PORT=9987
TS_CHANNEL_ADMIN_GID=5
TS_QUERY_TIMEOUT=3s

RRDTOOL=rrdtool
RRD_PATH=/var/lib/ts3monolith/linuxiarz.rrd
GRAPH_DIR=/var/lib/ts3monolith/graphs
STATS_INTERVAL=60s

# Per-IP rate limiting, off by default (see README "Rate limiting"). When
# RATE_LIMIT_ENABLED=false, none of the RATE_LIMIT_* values below do anything.
RATE_LIMIT_ENABLED=false
RATE_LIMIT_STATS=60
RATE_LIMIT_STATS_LIVE=60
RATE_LIMIT_GRAPH=600
RATE_LIMIT_CHANNEL=40
RATE_LIMIT_VERIFY=10
RATE_LIMIT_VERIFY_DONE=10
RATE_LIMIT_CREATE=5