# Stack settings. In Portainer, enter these under the stack's "Environment variables".
# For the docker compose CLI, copy this file to .env next to compose.yaml. Never commit the completed file.

# Host port the app listens on, bound to loopback so only NPMplus (host networking) can reach it.
# Change PROPOSAL_BOT_PORT if 4181 is already taken on the host.
PROPOSAL_BOT_BIND=127.0.0.1
PROPOSAL_BOT_PORT=4181

# Absolute host folders. The data folder must be writable by UID 1000.
PROPOSAL_BOT_DATA_HOST_PATH=/opt/proposal-bot/data
PROPOSAL_BOT_PROJECT_IMAGES_HOST_PATH=/opt/proposal-bot/Project Images

# Microsoft Entra sign-in. The redirect URI must be the HTTPS address NPM serves and must match the app registration exactly.
# PROPOSAL_BOT_AUTH_REQUIRED=false turns sign-in off: anyone who can reach the site can read and edit every project.
PROPOSAL_BOT_AUTH_REQUIRED=true
MICROSOFT_TENANT_ID=
MICROSOFT_CLIENT_ID=
MICROSOFT_CLIENT_SECRET=
MICROSOFT_REDIRECT_URI=https://proposals.example.com/auth/microsoft/callback
PROPOSAL_BOT_ALLOWED_EMAILS=person.one@example.com,person.two@example.com