# Single-operator dashboard password. Required.
STATUS_PASSWORD=change-me

# Optional: 32+ random bytes used to sign the session cookie. If absent, the
# cookie key is derived deterministically from STATUS_PASSWORD (so changing
# the password invalidates all existing sessions). Setting this explicitly is
# preferred (`openssl rand -base64 64` works).
# STATUS_COOKIE_SECRET=

# Used in templates for absolute URLs (sitemap, og tags, alert email links).
# Keep it without a trailing slash.
BASE_URL=https://status.example.com

# Where outage / recovery emails are delivered. Email is sent direct-to-MX
# from noreply@bythewood.me; you'll want a corresponding SPF entry on the
# sending domain so it doesn't end up in spam. Leave unset to disable email.
ALERT_EMAIL=alerts@example.com

# Discord webhook to post outage / recovery embeds to. Leave unset to disable.
# DISCORD_WEBHOOK_URL=https://discord.com/api/webhooks/...