.env.example

# These go into user secrets and env vars

CONVEX_URL=https://convex.example.com
CONVEX_ADMIN_KEY=replace-me
INTERNAL_API_SECRET=replace-me
PUBLIC_BASE_URL=https://undefinedlabs.tech

# Auth — PBKDF2-SHA256 hashes (generate via /admin/tools)
SHAREX_AUTH_KEY_HASH=replace-me
ADMIN_PASSWORD_HASH=replace-me

# Trusted reverse proxies (comma separated IPs/CIDRs), required in production when behind a proxy
TRUSTED_PROXY_IPS=

# Optional admin allowlist for /admin routes (comma separated IPs/CIDRs)
ADMIN_IP_ALLOWLIST=

# ASP.NET application rate limits
RATE_LIMIT_UPLOAD_PER_MINUTE=20
RATE_LIMIT_VIEW_PER_MINUTE_PER_SLUG=60
RATE_LIMIT_DOWNLOAD_PER_MINUTE_PER_SLUG=30
RATE_LIMIT_ADMIN_LOGIN_PER_15MIN=5

# Upload size limits
MAX_IMAGE_MB=20
MAX_FILE_MB=100
MAX_TEXT_KB=1024