.env.example

# SecureDGram Environment Configuration
# Copy this file to .env and fill in your values.
# NEVER commit .env to version control.

# User to run the daemon as (will drop privileges to this user)
SECUREDGRAM_USER=nobody

# Log destination: syslog | stdout | /path/to/file.log
# Default: syslog (zero-setup, works out of the box)
# For production file logging: /var/log/securedgram/daemon.log
SECUREDGRAM_LOG=syslog

# PID file path
# Default: securedgram.pid (current directory)
# For production: /var/run/securedgram/daemon.pid (requires directory setup)
SECUREDGRAM_PIDFILE=securedgram.pid

# UDP bind address
SECUREDGRAM_ADDRESS=0.0.0.0

# UDP listen port
SECUREDGRAM_PORT=61773

# 32-byte shared secret as a 64-character hex string
# Generate with: ruby -e "require 'securerandom'; puts SecureRandom.hex(32)"
SECUREDGRAM_SECRET=

# Auth time window in seconds (messages outside +/- this window are rejected)
SECUREDGRAM_WINDOW=10

# Max send retries before giving up on an outbound message
SECUREDGRAM_MAX_RETRIES=10

# Seconds to wait before retransmitting an unACKed outbound message
SECUREDGRAM_RETRY_INTERVAL=5

# SQLite3 database file path
# Default: securedgram.db (current directory)
# For production: /var/lib/securedgram/securedgram.db (requires directory setup)
SECUREDGRAM_DB=securedgram.db