# Generate each with: openssl rand -base64 48
POSTGRES_PASSWORD=
# One-use secret to create snowspeeder@gmail.com; leave blank/remove after bootstrap.
BOOTSTRAP_SETUP_TOKEN=
# Optional host path mounted read-only at /home/node/.pi/agent (never commit it).
PI_AGENT_CONFIG_DIR=./appdata/pi-agent
# Optional explicit reverse-proxy IP/CIDR; leave blank if no trusted proxy is present.
TRUST_PROXY=