# Copy to `.env.prod` on the deploy host (CT502) and fill with real secrets.
# `.env.prod` is gitignored — never commit real credentials.

# Database
POSTGRES_DB=xip
POSTGRES_USER=xip
POSTGRES_PASSWORD=change-me-to-a-strong-secret

# Public origin (baked into the frontend build + used by the WS URL)
PUBLIC_URL=https://xip.kerboul.me

# Paywall: "true" = open bar (everything free for everyone), "false" = paywall on
# (free only on localhost, per the README).
XIP_OPEN_BAR=true