# InternetPressure.io — production environment for infra/compose.yml (copy to deploy/.env on the server; never commit)
# Generate secrets with: openssl rand -hex 24

# WireGuard address of this server on the BHS64 hub (edge Caddy :8350 is bound to it only)
WG_IP=10.67.0.61

# stores
POSTGRES_PASSWORD=change-me
CLICKHOUSE_PASSWORD=change-me
CLICKHOUSE_MEM=12g

# application
IP_ADMIN_TOKEN=change-me              # X-IP-Admin-Token for /api/admin and the /admin UI
IP_SITE_URL=https://www.internetpressure.io
IP_LOG_LEVEL=info
IP_TAG=latest

# BGP ingestion: empty = every RIS collector (≈10 k prefixes/s). Raw events are sampled 1/25 (IP_BGP_RAW_SAMPLE in settings).
IP_RIS_COLLECTORS=
IP_BGP_STORE_RAW=true