.env.example

# Docker Compose deployment env (repo root)

DB_USER=deepbounty
DB_PASSWORD=change_me
DB_NAME=deepbounty

# Used to generate callback URLs (e.g. https://deepbounty.example.com)
EXTERNAL_URL=http://localhost:8080

# Only needed if the API is not served under /api: overrides the MCP OAuth
# redirect URI (default: EXTERNAL_URL + /api/mcp/oauth/callback)
# MCP_OAUTH_REDIRECT_URI=

# Must match server/config/config.json => workerKey
WORKER_KEY=replace_with_64_hex_chars

# Webapp published port
WEBAPP_PORT=8080

# Access mode for the web UI and API:
# - public: no IP restriction
# - local: only private/LAN IPs can access / and /api/* (callbacks /cb/* remain public)
DEEPBOUNTY_ACCESS_MODE=public

# If DeepBounty is behind another reverse proxy (e.g. Traefik/Nginx/Cloudflare),
# enable real client-IP detection based on X-Forwarded-For.
# IMPORTANT: only trust your proxy IPs/CIDRs, otherwise "local" mode can be bypassed.
DEEPBOUNTY_BEHIND_PROXY=false
DEEPBOUNTY_TRUSTED_PROXY_CIDRS=

# Optional override for remote worker deployments (docker-compose.worker.yml uses this)
# SERVER_WS_URL=wss://deepbounty.example.com/api/ws