.env.example

# Optional: default Portainer target for all clients (bypassing the connect form).
# If unset, each user must set the Portainer base URL in the app (the browser sends X-Portainer-URL).
# PORTAINER_URL=https://portainer.example.com:9443

# Optional — enables AI log triage and assistant
# Use Anthropic (Claude) OR OpenAI (GPT-4o) — not both. Anthropic takes priority if both are set.
ANTHROPIC_API_KEY=sk-ant-...
# OPENAI_API_KEY=sk-...

# Optional — AI provider override (auto-detected from key if not set)
# AI_PROVIDER=anthropic   # or: openai

# Optional — OpenAI model override (default: gpt-4o)
# OPENAI_MODEL=gpt-4o

# Optional — HTTPS port (default 443)
PORT=443

# Optional — HTTP redirect port (default 80)
HTTP_PORT=80

# Optional — provide real TLS certs (omit to use auto-generated self-signed)
# SSL_CERT=/certs/fullchain.pem
# SSL_KEY=/certs/privkey.pem

# Optional — directory to store generated self-signed cert (default: app dir)
# SSL_CERT_DIR=/certs

# Optional — Git (or any) HTTPS URL of the template catalogue JSON the server fetches.
# TEMPLATE_URL=https://raw.githubusercontent.com/portainer/portainer-run/develop/templates.json

# Required for GitOps: encrypts stored Git target credentials at rest.
# Must be at least 32 characters. Generate with: openssl rand -hex 32
ENCRYPTION_KEY=change-me-to-a-random-32-char-string