TALLYNOTE_HOST=127.0.0.1
TALLYNOTE_PORT=3000
TALLYNOTE_DATA_DIR=./data
TALLYNOTE_TIMEZONE=Asia/Shanghai
TALLYNOTE_PUBLIC_ORIGIN=http://127.0.0.1:3000
TALLYNOTE_TRUST_PROXY=false
TALLYNOTE_COOKIE_SECURE=false
# Set TALLYNOTE_HOST=0.0.0.0 and the server's real IP Origin for direct
# access. HTTP on a non-local Origin is opt-in; use HTTPS behind a proxy in
# production.
TALLYNOTE_ALLOW_INSECURE_HTTP=false
TALLYNOTE_SESSION_IDLE_HOURS=24
TALLYNOTE_SESSION_ABSOLUTE_HOURS=168
TALLYNOTE_EXPORT_TTL_MINUTES=15
TALLYNOTE_MAX_FILE_MB=20
TALLYNOTE_MAX_FILES_PER_REQUEST=20
TALLYNOTE_MAX_RECORD_MB=100
TALLYNOTE_MAX_TOTAL_MB=2048
TALLYNOTE_MAX_CONCURRENT_EXPORTS=2
TALLYNOTE_MAX_EXPORT_RECORDS=5000
TALLYNOTE_MAX_EXPORT_MB=1024
TALLYNOTE_MAX_EXPORT_STORAGE_MB=2048

# One-click updates are disabled for source/dev installs. The systemd
# installer sets these values and enables the privileged updater path unit.
TALLYNOTE_UPDATE_STRATEGY=disabled
TALLYNOTE_INSTALL_PREFIX=./
# The privileged updater derives its private workspace as
# <TALLYNOTE_INSTALL_PREFIX>/.update-work; the installer provisions it as
# 0700 root:root. Do not point it into the application data/staging tree.
TALLYNOTE_UPDATE_METADATA_URL=https://git.awaioi.com/api/v1/repos/awaioi/TallyNote/releases/latest
TALLYNOTE_UPDATE_ALLOWED_HOSTS=git.awaioi.com
TALLYNOTE_UPDATE_MAX_MB=512
# SHA-256 is always required. Detached Ed25519 signatures are optional; set
# this to true only when a root-managed public key is configured below.
TALLYNOTE_UPDATE_REQUIRE_SIGNATURE=false
# TALLYNOTE_UPDATE_PUBLIC_KEY_FILE=/etc/tallynote/update-signing-key.pub
TALLYNOTE_UPDATE_CHECK_COOLDOWN_SECONDS=60
TALLYNOTE_UPDATE_DOWNLOAD_COOLDOWN_SECONDS=15
TALLYNOTE_UPDATE_APPLY_COOLDOWN_SECONDS=15