NODE_ENV=development
APP_HOST=0.0.0.0
APP_PORT=3001
APP_ORIGINS=http://localhost:5173
APP_EXTERNAL_BASE_URL=https://mail.example.com
MAILSERVER_CONTAINER=mailserver
MAILSERVER_TIMEOUT_MS=10000
HOSTED_DOMAINS=example.com
FORWARDING_ALLOWED_DOMAINS=example.com
SESSION_TTL_MINUTES=15
GLOBAL_RATE_LIMIT=240
ROUTE_RATE_LIMIT=90
RATE_LIMIT_WINDOW_SECONDS=60
LOGIN_RATE_LIMIT=5
LOGIN_WINDOW_SECONDS=600
MAX_MESSAGES=25
AVATAR_MAX_BYTES=2097152
TRUST_PROXY=false
APP_ADMIN_EMAIL=admin@example.com
APP_ADMIN_PASSWORD=change-me-now
# 32-byte base64 key used to encrypt TOTP secrets at rest.
TOTP_ENCRYPTION_KEY=REPLACE_WITH_32_BYTE_BASE64_KEY