MAGPIE_ADDR=127.0.0.1:8090
MAGPIE_DATA_DIR=/var/lib/magpie

# Optional bearer-token API for /objects/* routes.
MAGPIE_AUTH_TOKEN=change-this-long-random-token

# S3-compatible API credentials for /:bucket/:key routes.
MAGPIE_S3_ACCESS_KEY_ID=magpie
MAGPIE_S3_SECRET_ACCESS_KEY=change-this-long-random-s3-secret
# Optional multi-key form: id:secret:read,write,admin;id2:secret2:read
MAGPIE_S3_KEYS=
MAGPIE_S3_REGION=auto

# Temporarily set true only for trusted private migrations with clients that
# upload using SigV4 UNSIGNED-PAYLOAD, such as some rclone versions.
MAGPIE_ALLOW_UNSIGNED_PAYLOADS=false

# Comma-separated peer base URLs for async write/delete replication.
# MAGPIE_REPLICATION_SECRET is required when peers are set.
MAGPIE_REPLICATION_PEERS=
MAGPIE_REPLICATION_SECRET=
# Replication peers must use https unless this is explicitly enabled for a
# trusted local/private network.
MAGPIE_ALLOW_INSECURE_REPLICATION=false
MAGPIE_REPLICATION_MAX_JOBS=10000
MAGPIE_REPLICATION_MAX_ATTEMPTS=100

# Comma-separated bucket allowlist. Empty allows any bucket name.
MAGPIE_ALLOWED_BUCKETS=app-uploads

# Comma-separated bucket/prefix values that allow unsigned public GET/HEAD requests.
# Empty/private by default. Set to `app-uploads/avatars` only for public media.
# MAGPIE_PUBLIC_PREFIXES=app-uploads/avatars

# Per-IP request limit per minute. Set 0 to disable.
MAGPIE_RATE_LIMIT_PER_MINUTE=600
# Trust X-Forwarded-For/X-Real-IP for rate limiting only behind a trusted proxy.
MAGPIE_TRUST_PROXY_HEADERS=false

# Upload safety limits.
# Default: 1073741824 (1 GiB)
MAGPIE_MAX_OBJECT_SIZE=1073741824

# Reject writes if disk free space would fall below this value.
# Default: 1073741824 (1 GiB)
MAGPIE_MIN_FREE_BYTES=1073741824

# Maximum accepted SigV4 presigned URL lifetime.
# Default: 24h
MAGPIE_PRESIGNED_MAX_EXPIRY=24h

# Remove incomplete multipart uploads older than this age.
# Default: 24h
MAGPIE_MULTIPART_MAX_AGE=24h

# Maximum total expanded bytes accepted by restore.
# Default: 10737418240 (10 GiB)
MAGPIE_MAX_RESTORE_BYTES=10737418240

# Rebuild SQLite metadata from existing files on startup.
# Useful after manual restores/migrations; usually false for normal startup.
MAGPIE_REINDEX_ON_START=false