# SparkyFitness Environment Variables # Copy this file to .env in the root directory and fill in your own values before running 'docker-compose up'. # --- PostgreSQL Database Settings --- # These values should match the ones used by your PostgreSQL container. # For local development (running Node.js directly), use 'localhost' or '127.0.0.1' if PostgreSQL is on your host. SPARKY_FITNESS_DB_NAME=sparkyfitness_db #SPARKY_FITNESS_DB_USER is super user for DB initialization and migrations. SPARKY_FITNESS_DB_USER=sparky SPARKY_FITNESS_DB_PASSWORD=changeme_db_password # Application database user with limited privileges. it can be changed any time after initialization. SPARKY_FITNESS_APP_DB_USER=sparky_app SPARKY_FITNESS_APP_DB_PASSWORD=password # For Docker Compose deployments, SPARKY_FITNESS_DB_HOST will be the service name (e.g., 'sparkyfitness-db'). SPARKY_FITNESS_DB_HOST=sparkyfitness-db #SPARKY_FITNESS_DB_PORT=5432 # Optional. Defaults to 5432 if not specified. # --- Backend Server Settings --- # The hostname or IP address of the backend server. # For Docker Compose, this is typically the service name (e.g., 'sparkyfitness-server'). # For local development or other deployments, this might be 'localhost' or a specific IP. SPARKY_FITNESS_SERVER_HOST=sparkyfitness-server # The external port the server will be exposed on. SPARKY_FITNESS_SERVER_PORT=3010 # The public URL of your frontend (e.g., https://fitness.example.com). This is crucial for CORS security. # For local development, use http://localhost:8080. For production, use your domain with https. SPARKY_FITNESS_FRONTEND_URL=http://localhost:8080 # Allow CORS requests from private network addresses (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, localhost, etc.) # SECURITY WARNING: Only enable this if you are running on a private/self-hosted network. # Do NOT enable on shared hosting or cloud environments where other users might access your network. # Default: false (secure default - only the configured SPARKY_FITNESS_FRONTEND_URL is allowed) #ALLOW_PRIVATE_NETWORK_CORS=false # A comma-separated list of additional URLs that Better Auth should trust. # This is useful when accessing the app from a specific local IP on your network. # Example: SPARKY_FITNESS_EXTRA_TRUSTED_ORIGINS=http://192.168.1.175:8080,http://10.0.0.5:8080 # SPARKY_FITNESS_EXTRA_TRUSTED_ORIGINS= # Logging level for the server (e.g., INFO, DEBUG, WARN, ERROR) SPARKY_FITNESS_LOG_LEVEL=ERROR # Node.js environment mode (e.g., development, production, test) # Set to 'production' for deployment to ensure optimal performance and security. NODE_ENV=production # Server timezone. Use a TZ database name (e.g., 'America/New_York', 'Etc/UTC'). # This affects how dates/times are handled by the server if not explicitly managed in code. TZ=Etc/UTC # --- Security Settings --- # A 64-character hex string for data encryption. # You can generate a secure key with the following command: # openssl rand -hex 32 # or # node -e "console.log(require('crypto').randomBytes(32).toString('hex'))" # Changing this will invalidate existing encrypted data. You will need to delete and add External Data sources again. SPARKY_FITNESS_API_ENCRYPTION_KEY=changeme_replace_with_a_64_character_hex_string # For Docker Swarm/Kubernetes secrets, you can use a file-based secret: # SPARKY_FITNESS_API_ENCRYPTION_KEY_FILE=/run/secrets/sparkyfitness_api_key BETTER_AUTH_SECRET=changeme_replace_with_a_strong_better_auth_secret # For Docker Swarm/Kubernetes secrets, you can use a file-based secret: # BETTER_AUTH_SECRET_FILE=/run/secrets/sparkyfitness_better_auth_secret # --- Signup Settings --- # Set to 'true' to disable new user registrations. SPARKY_FITNESS_DISABLE_SIGNUP=false # --- Admin Settings --- # Set the email of a user to automatically grant admin privileges on server startup. # This is useful for development or initial setup. # Example: SPARKY_FITNESS_ADMIN_EMAIL=admin@example.com # Optional. If not set, no admin user will be created automatically. # SPARKY_FITNESS_ADMIN_EMAIL= # --- Login Management Fail-Safe --- # Set to 'true' to force email/password login to be enabled, overriding any in-app settings. # This is a fail-safe to prevent being locked out if OIDC is misconfigured. SPARKY_FITNESS_FORCE_EMAIL_LOGIN=true # --- Email Settings (Optional) --- # Configure these variables if you want to enable email notifications (e.g., for password resets). # If not configured, email functionality will be disabled. # SPARKY_FITNESS_EMAIL_HOST=smtp.example.com # SPARKY_FITNESS_EMAIL_PORT=587 # SPARKY_FITNESS_EMAIL_SECURE=true # Use 'true' for TLS/SSL, 'false' for plain text # SPARKY_FITNESS_EMAIL_USER=your_email@example.com # SPARKY_FITNESS_EMAIL_PASS=your_email_password # SPARKY_FITNESS_EMAIL_FROM=no-reply@example.com # --- Volume Paths (Optional) --- # These paths define where Docker volumes will store persistent data on your host. # If not set, Docker will manage volumes automatically in its default location. # DB_PATH=../postgresql # Path for PostgreSQL database data # SERVER_BACKUP_PATH=./backup # Path for server backups # SERVER_UPLOADS_PATH=./uploads # Path for profile pictures and exercise images # --- API Key Rate Limiting (Optional) --- # Override the default rate limit for API key authentication (used by automation tools like n8n). # Defaults to 100 requests per 60-second window if not set. #SPARKY_FITNESS_API_KEY_RATELIMIT_WINDOW_MS=60000 #SPARKY_FITNESS_API_KEY_RATELIMIT_MAX_REQUESTS=100 # --- Start of Garmin Integration Settings --- #Below variables are needed only for Garmin integration. If you don't use Garmin integration, you can remove them in your .env file. # The URL for the Garmin microservice. # For Docker Compose, this would typically be the service name and port (e.g., 'http://sparkyfitness-garmin:8000'). # For local development, use 'http://localhost:8000' or the port you've configured. GARMIN_MICROSERVICE_URL=http://sparkyfitness-garmin:8000 # This is used for Garmin Connect synchronization. # If you are not using Garmin integration, you don't need this. Make sure this matches with GARMIN_MICROSERVICE_URL. GARMIN_SERVICE_PORT=8000 # set to true for China region. Everything else should be false. Optional - defaults to false GARMIN_SERVICE_IS_CN=false # --- End of Garmin Integration Settings --- #----- Developers Section ----- # Data source for external integrations (fitbit, garmin, withings). # By default, these use live APIs. Set to 'local' to use mock data from the mock_data directory. #SPARKY_FITNESS_FITBIT_DATA_SOURCE=local #SPARKY_FITNESS_WITHINGS_DATA_SOURCE=local #SPARKY_FITNESS_GARMIN_DATA_SOURCE=local #SPARKY_FITNESS_POLAR_DATA_SOURCE=local #SPARKY_FITNESS_HEVY_DATA_SOURCE=local # Set to 'true' to capture live API responses into mock data JSON files. Defaults to false. #SPARKY_FITNESS_SAVE_MOCK_DATA=false #-----------------------------