# Configuration for the ai-crew-sync system service.
#
# Installed as /etc/ai-crew-sync/ai-crew-sync.env and read by systemd. It is
# root-readable only, because DATABASE_URL carries a password — keep it that
# way, and never move these values into the unit file, where `systemctl show`
# would print them.
#
# The bus will not start until DATABASE_URL points at a reachable Postgres.
# Every other setting has a working default; see `.env.example` in the
# repository for the full list with explanations.
# REQUIRED. The database that holds all team state.
DATABASE_URL=postgres://bus:change-me@localhost:5432/bus
# Address the bus listens on. Bind to localhost when a reverse proxy fronts it.
BUS_BIND=0.0.0.0:8787
# Hostnames accepted in the Host header (anti DNS-rebinding). Set your real
# hostname when the bus is exposed directly; "*" is only safe behind a proxy
# that already validates it.
BUS_ALLOWED_HOSTS=*
# Signs the dashboard's read-only session cookies. Set the SAME value on every
# instance, or a session stops working the moment another one serves it.
# Generate one with: openssl rand -hex 32
#BUS_DASHBOARD_SECRET=
# Requests per minute per token, enforced in-process (0 disables it).
BUS_RATE_LIMIT_PER_MINUTE=600
RUST_LOG=ai_crew_sync=info