# OTSSignsOrchestrator — environment variables
# Copy to .env and fill in real values before running.
#
# Only TWO secrets are required here — everything else is configured
# via the admin UI (Settings page) and stored encrypted in PostgreSQL.

# ── PostgreSQL ───────────────────────────────────────────────────────────────
# Password for the postgres service AND the app connection string.
# Generate:  openssl rand -base64 32
POSTGRES_PASSWORD=changeme

# ── JWT ──────────────────────────────────────────────────────────────────────
# Key must be at least 32 characters (256-bit).
# Generate:  openssl rand -base64 48
JWT_KEY=change-me-to-a-random-256-bit-key