this repo has no description
1# =============================================================================
2# Server
3# =============================================================================
4SERVER_HOST=127.0.0.1
5SERVER_PORT=3000
6# The public-facing hostname of the PDS (used in DID documents, JWTs, etc.)
7PDS_HOSTNAME=localhost:3000
8# =============================================================================
9# Database
10# =============================================================================
11DATABASE_URL=postgres://postgres:postgres@localhost:5432/pds
12# Connection pool settings (defaults are good for most deployments)
13# DATABASE_MAX_CONNECTIONS=100
14# DATABASE_MIN_CONNECTIONS=10
15# DATABASE_ACQUIRE_TIMEOUT_SECS=30
16# =============================================================================
17# Blob Storage (S3-compatible)
18# =============================================================================
19S3_ENDPOINT=http://localhost:9000
20AWS_REGION=us-east-1
21S3_BUCKET=pds-blobs
22AWS_ACCESS_KEY_ID=minioadmin
23AWS_SECRET_ACCESS_KEY=minioadmin
24# =============================================================================
25# Valkey (for caching and distributed rate limiting)
26# =============================================================================
27# If not set, falls back to in-memory caching (single-node only)
28# VALKEY_URL=redis://localhost:6379
29# =============================================================================
30# Security Secrets
31# =============================================================================
32# These MUST be set in production (minimum 32 characters each)
33# In development, set BSPDS_ALLOW_INSECURE_SECRETS=1 to use defaults
34# Server-wide secret for OAuth token signing (HS256)
35# JWT_SECRET=your-secure-random-string-at-least-32-chars
36# Secret for DPoP proof validation
37# DPOP_SECRET=your-secure-random-string-at-least-32-chars
38# Key for encrypting user signing keys at rest (AES-256-GCM)
39# MASTER_KEY=your-secure-random-string-at-least-32-chars
40# Set this ONLY in development to allow default/weak secrets
41# BSPDS_ALLOW_INSECURE_SECRETS=1
42# =============================================================================
43# PLC Directory
44# =============================================================================
45# PLC_DIRECTORY_URL=https://plc.directory
46# PLC_TIMEOUT_SECS=10
47# PLC_CONNECT_TIMEOUT_SECS=5
48# Optional: rotation key for PLC operations (defaults to user's key)
49# PLC_ROTATION_KEY=did:key:...
50# =============================================================================
51# Federation
52# =============================================================================
53# Appview URL for proxying app.bsky.* requests
54# APPVIEW_URL=https://api.bsky.app
55# Comma-separated list of relay URLs to notify via requestCrawl
56# CRAWLERS=https://bsky.network
57# =============================================================================
58# Firehose (subscribeRepos WebSocket)
59# =============================================================================
60# Buffer size for firehose broadcast channel
61# FIREHOSE_BUFFER_SIZE=10000
62# Disconnect slow consumers after this many events of lag
63# FIREHOSE_MAX_LAG=5000
64# =============================================================================
65# Notification Service
66# =============================================================================
67# Queue processing settings
68# NOTIFICATION_BATCH_SIZE=100
69# NOTIFICATION_POLL_INTERVAL_MS=1000
70# Email notifications (via sendmail/msmtp)
71# MAIL_FROM_ADDRESS=noreply@example.com
72# MAIL_FROM_NAME=My PDS
73# SENDMAIL_PATH=/usr/sbin/sendmail
74# Discord notifications (via webhook)
75# DISCORD_WEBHOOK_URL=https://discord.com/api/webhooks/...
76# Telegram notifications (via bot)
77# TELEGRAM_BOT_TOKEN=your-bot-token
78# Signal notifications (via signal-cli)
79# SIGNAL_CLI_PATH=/usr/local/bin/signal-cli
80# SIGNAL_SENDER_NUMBER=+1234567890
81# =============================================================================
82# Repository Import
83# =============================================================================
84# Set to "true" to accept repository imports
85# ACCEPTING_REPO_IMPORTS=false
86# Maximum import size in bytes (default: 50MB)
87# MAX_IMPORT_SIZE=52428800
88# Maximum blocks per import (default: 100000)
89# MAX_IMPORT_BLOCKS=100000
90# Skip verification during import (testing only)
91# SKIP_IMPORT_VERIFICATION=false
92# =============================================================================
93# Account Registration
94# =============================================================================
95# Require invite codes for registration
96# INVITE_CODE_REQUIRED=false
97# Comma-separated list of available user domains
98# AVAILABLE_USER_DOMAINS=example.com
99# =============================================================================
100# Rate Limiting
101# =============================================================================
102# Disable all rate limiting (testing only, NEVER in production)
103# DISABLE_RATE_LIMITING=1
104# =============================================================================
105# Miscellaneous
106# =============================================================================
107# Allow HTTP for proxy requests (development only)
108# ALLOW_HTTP_PROXY=1
109# Custom frontend directory (defaults to ./frontend/dist)
110# FRONTEND_DIR=/path/to/frontend/dist
111CARGO_MOMMYS_LITTLE=mister
112CARGO_MOMMYS_PRONOUNS=his
113CARGO_MOMMYS_ROLES=daddy
114CARGO_MOMMYS_EMOTES="🚛/🧱/🚜/🔩/🦺"
115CARGO_MOMMYS_MOODS=ominous