# MessageWeave production bootstrap (C-REDIS-ONLY-STATE)
#
# The process requires only these two variables. CONFIG_ENCRYPTION_KEY is the SPA
# admin credential and the one-shot bootstrap trust root; the Redis ACL password
# in REDIS_URL only gates the database connection (src/main.rs:88-91).
# Never commit or log a real URL/password/key.
REDIS_URL=redis://:REPLACE_WITH_REDIS_ACL_PASSWORD@redis.example.com:6379/0
# Required 32-byte random hex key (64 hex characters). Never store in Redis or logs.
CONFIG_ENCRYPTION_KEY=REPLACE_WITH_64_HEX_CHAR_RANDOM_KEY

# PORT is an optional platform override (default: 8080). RUN_MODE is accepted but
# currently has no effect — both modes share one router (default: webhook). Business
# secrets (Telegram/JMAP/LLM/auth) must be supplied once via HTTPS /api/bootstrap;
# they are then persisted in Redis and are never echoed by the API.