.env.example

# Copy this file to .env before starting the stack. Do not commit .env.
# Generate secrets with: openssl rand -base64 48
POSTGRES_PASSWORD=
BETTER_AUTH_SECRET=
PIXEL_SIGNING_SECRET=
# Generate these with: openssl rand -base64 32
ESP_CREDENTIALS_ENCRYPTION_KEY=
SUPPRESSION_HASH_KEY=

# The one-shot init service finds or creates this initial organization owner.
# This selects an ordinary organization owner; it does not grant global admin.
BOOTSTRAP_ORGANIZATION_OWNER_EMAIL=admin@example.com

# Optional headless integration keys. Generate distinct sl_org_live_... keys
# and keep both values in this server-side .env file; never expose them to a
# browser or mobile client.
BOOTSTRAP_DELIVERY_SETUP_API_KEY=
BOOTSTRAP_TEAM_PROVISIONING_API_KEY=

# Explicit billing mode. Use oss for self-hosted installs. Cloud requires the
# provider/catalog variables documented in apps/api/.env.example.
SENDLIT_DEPLOYMENT_MODE=oss
# Amounts are integer minor units (cents for USD). Raising a price requires a
# new provider product ID and a higher BILLING_CATALOG_REVISION. Paid amounts
# are never source constants. See apps/api/.env.example.
# Optional Dodo brand filter (cloud only). Leave unset by default. Before
# setting it, confirm the brand ID from a real SendLit event
# (`billing webhook-inspect`); a wrong ID makes SendLit's own events ignored.
# DODO_BRAND_ID=

# Optional cloud fair-use controls (defaults match the published policy).
# BILLING_FAIR_USE_MIN_ACCEPTED=500
# BILLING_FAIR_USE_BOUNCE_WARN_BPS=200
# BILLING_FAIR_USE_COMPLAINT_WARN_BPS=5
# BILLING_FAIR_USE_BOUNCE_PAUSE_BPS=500
# BILLING_FAIR_USE_COMPLAINT_PAUSE_BPS=10
# BILLING_FAIR_USE_COMPLAINT_STOP_BPS=30
# BILLING_FAIR_USE_COMPLAINT_STOP_ABSOLUTE=10
# BILLING_FAIR_USE_TRANSACTIONAL_DAILY_LIMIT=100
# BILLING_FAIR_USE_MINIMUM_HOLD_HOURS=72
# BILLING_FAIR_USE_RECOVERY_CLEAN_DAYS=7
# BILLING_RAMP_DAYS_0_2_LIMIT=200
# BILLING_RAMP_DAYS_3_6_LIMIT=1000
# BILLING_RAMP_DAYS_7_13_LIMIT=10000
# BILLING_TEST_VOLUME_THRESHOLD=100

# Optional test-send limits (all deployments; each recipient counts once).
# See apps/docs self-hosting/sending-safeguards.
# TEST_SEND_DAILY_LIMIT=100
# TEST_SEND_BURST_LIMIT=50
# TEST_SEND_BURST_HOURS=3
# TEST_SEND_EMAIL_DAILY_LIMIT=20

# Public origins. For a local installation, keep these defaults. For a public
# deployment, use the externally reachable HTTPS origins and set PROTOCOL=https.
API_PUBLIC_URL=http://localhost:5000
WEB_CLIENT=http://localhost:3000
PROTOCOL=http
DOMAIN=localhost:5000

# Optional published host ports.
API_PORT=5000
WEB_PORT=3000

# Optional platform SMTP, used for sign-in OTP emails. Team campaign delivery
# credentials are configured in the SendLit dashboard instead.
EMAIL_HOST=
EMAIL_PORT=587
EMAIL_USER=
EMAIL_PASS=
EMAIL_FROM=

# Optional integrations and operational settings.
AUTH_COOKIE_DOMAIN=
ENABLE_TRUST_PROXY=false
MEDIALIT_APIKEY=
MEDIALIT_SERVER=https://api.medialit.cloud
MAX_UPLOAD_SIZE=10485760

# Optional: public status page, linked from the dashboard's user menu as
# "System status" (e.g. https://status.sendlit.app). Unset hides the link.
STATUS_PAGE_URL=

# Optional: PostHog for the API (errors/events/logs) and the web dashboard
# (identify + session recording). Unset disables telemetry. The web app reads
# these at container start — they are not compiled into the Next.js image.
POSTHOG_API_KEY=
POSTHOG_HOST=https://us.i.posthog.com
DEPLOY_ENV=

# Optional: Google Postmaster Tools on the dashboard's Sender reputation card.
# Create an OAuth client (type "Web application") in Google Cloud, enable the
# Gmail Postmaster Tools API, and add <API public URL>/integrations/google-postmaster/callback
# as an authorized redirect URI. Unset hides the Connect button.
GOOGLE_POSTMASTER_CLIENT_ID=
GOOGLE_POSTMASTER_CLIENT_SECRET=