.env.example

# Required in production (min 16 characters). Optional in development (a dev default is used).
# openssl rand -hex 32
PULSEBEAT_JWT_SECRET=

# Seeded on first run when no users exist (default username: admin)
PULSEBEAT_ADMIN_USER=admin
PULSEBEAT_ADMIN_PASSWORD=

# Optional: shown as the GitHub link on Settings → About (e.g. your fork or upstream repo).
# PULSEBEAT_GITHUB_URL=https://github.com/your-org/pulsebeat

# Optional: comma-separated absolute origins (scheme + host, no path) for credentialed CORS and
# CSP connect-src (plus matching ws:/wss:). Use when the UI is served from a different origin
# than the API, or to align CSP with your public URL behind a reverse proxy.
# PULSEBEAT_ALLOWED_ORIGINS=https://pulsebeat.example.com,http://localhost:5173