.env.example

# =============================================================
# Environment configuration of the panel — copy to `.env` and fill in.
#   cp .env.example .env && chmod 640 .env && chown root:mailweb .env
#   (group = the user PHP-FPM runs Roundcube and the panel as: mailweb with the separate pool of install.sh
#    section 1b; www-data only when Roundcube shares the [www] pool with other sites)
# Better outside the application directory (1.1.0):  /etc/mailpanel/panel.env  (root:mailweb 640, directory
#   /etc/mailpanel root:mailweb 750) — when it exists, it is read BEFORE <directory>/.env.
# The file must never reach a repository and must never be served by the web server (.htaccess denies it — check after
# the install that /.env answers 403 — but that is the only barrier if AllowOverride disappears; hence /etc/mailpanel).
# =============================================================

# prod = real IMAP sign-in + system integrations (Fail2Ban / Postfix)
# dev  = no IMAP (the password is checked against the database hash), integrations off, full error messages
APP_ENV=prod

APP_TIMEZONE=Europe/Warsaw

# The panel's database (schema `mailserver`).
# The `mailpanel` account gets per-table privileges from sql/panel_grants.sql (not `mailserver.*`).
# Password: install.sh section 0 creates the account and prints it (openssl rand -hex 24); if you set one yourself,
# keep to [A-Za-z0-9._~+-] like the other database accounts of the mail server.
PANEL_DB_DSN="mysql:host=127.0.0.1;dbname=mailserver;charset=utf8mb4"
PANEL_DB_USER=mailpanel
PANEL_DB_PASS=TU_WSTAW_SILNE_HASLO

# Fail2Ban configuration the panel's Fail2Ban tab reads. The file belongs to root (root:root 644); it is written by the
# helper /usr/local/sbin/mailpanel-f2b-apply, which handles ONLY /etc/fail2ban/jail.local — do not change this value.
F2B_JAIL_LOCAL=/etc/fail2ban/jail.local

# Addresses that are NOT subject to the portal's sign-in / registration limits nor to the sign-in CAPTCHA, that the
# suspicious-IP scanner skips and that the panel refuses to ban. Addresses and CIDR ranges, comma separated, e.g.
# "203.0.113.7,2001:db8:1::/48" — put the server's IP and your own fixed administrator address here.
SCAN_TRUSTED_IPS=

# Languages added in the panel (a copy or an uploaded pack, 1.3.0): JSON files in a DATA directory only the PHP pool
# user writes (mailweb, 0750; install.sh section 12 creates it). Polish and English are part of the code and work
# without it.
# LANG_DATA_DIR=/var/lib/roundcontrol/lang