# Single-operator dashboard password. Required.
ANALYTICS_PASSWORD=change-me

# Optional: 32+ random bytes used to sign the session cookie. If absent, the
# cookie key is derived deterministically from ANALYTICS_PASSWORD (so changing
# the password invalidates all existing sessions). Setting this explicitly is
# preferred — `openssl rand -base64 64` works.
# ANALYTICS_COOKIE_SECRET=

# Used in templates for absolute URLs (sitemap, og tags, the embed snippet
# shown on the dashboard). Keep it without a trailing slash.
BASE_URL=https://analytics.example.com