.env.example

# Copy this file to .env and fill in real values. .env is gitignored and
# must never be committed, every value below is a secret or a
# deployment-specific setting.

# Postgres superuser, used only by the postgres container itself and by
# you manually (via psql) to run the pgscope_agent role setup documented
# in the root README. The application containers never use this account.
# Generate the password with:
#   LC_ALL=C tr -dc 'A-Za-z0-9_-' < /dev/urandom | head -c 48; echo
POSTGRES_DB=pgscope_demo
POSTGRES_SUPERUSER=postgres
POSTGRES_SUPERUSER_PASSWORD=

# Connection string the backend uses, pointed at the least-privilege
# pgscope_agent role, not the superuser above. Use the key=value DSN
# format, not postgres://, see go/README.md for why. The host is
# "postgres", the service name in docker-compose.yml, not "localhost",
# since the backend reaches Postgres over the internal Docker network.
# Generate pgscope_agent's password with:
#   LC_ALL=C tr -dc 'A-Za-z0-9_-' < /dev/urandom | head -c 48; echo
PGSCOPE_DATABASE_URL=host=postgres port=5432 user=pgscope_agent password= dbname=pgscope_demo sslmode=disable

# The shared secret required to log into pgscope. Generate it with a mix
# of uppercase, lowercase, and digits, avoiding symbols like "#", "/",
# "+", or "=" that can break URL parsing, shell escaping, or get silently
# truncated by .env parsers that treat an unquoted "#" as a comment:
#   LC_ALL=C tr -dc 'A-Za-z0-9_-' < /dev/urandom | head -c 48; echo
PGSCOPE_API_KEY=

# How often, in seconds, the backend polls Postgres while monitoring is
# active. Optional, defaults to 1 if left blank.
PGSCOPE_POLL_INTERVAL_SECONDS=1