# --- Security Settings ---
PAPERLESS_SECRET_KEY=YOUR_VERY_LONG_RANDOM_SECRET_KEY_HERE # Generate with `openssl rand -hex 32` or similar
PAPERLESS_ADMIN_USER=youradmin
PAPERLESS_ADMIN_PASSWORD=your_strong_admin_password
PAPERLESS_URL=http://your-paperless-domain.com # Or your server's IP if not using a domain
PAPERLESS_ALLOWED_HOSTS=localhost,your-server-ip,your-paperless-domain.com
PAPERLESS_CSRF_TRUSTED_ORIGINS=http://your-paperless-domain.com

# --- Database Settings (PostgreSQL) ---
PAPERLESS_DBHOST=db
PAPERLESS_DBENGINE=postgresql
PAPERLESS_DBNAME=paperless
PAPERLESS_DBUSER=paperless
PAPERLESS_DBPASS=your_strong_db_password

# --- Redis Settings ---
PAPERLESS_REDIS=redis://broker:6379

# --- User Mapping (Important for file permissions) ---
# Find your user's UID and GID on the host system with `id -u` and `id -g`
USERMAP_UID=1000 # Replace with your user's UID
USERMAP_GID=1000 # Replace with your user's GID

# --- General Settings ---
PAPERLESS_TIME_ZONE=Europe/Berlin # Change to your timezone (e.g., America/New_York)
PAPERLESS_OCR_LANGUAGE=eng # Default OCR language (e.g., eng, deu, fra, spa, ita). Separate multiple with '+' (e.g., eng+deu)
PAPERLESS_OCR_LANGUAGES=eng,deu # Languages to download for OCR

# --- Volume Paths (Optional - leave commented for Docker named volumes as fallback) ---
# If uncommented, these will use bind mounts to the specified host path.
# PAPERLESS_DATA_PATH=/opt/paperless-ngx/data
# PAPERLESS_MEDIA_PATH=/opt/paperless-ngx/media
# PAPERLESS_PGDATA_PATH=/opt/paperless-ngx/pgdata
# PAPERLESS_REDISDATA_PATH=/opt/paperless-ngx/redisdata
# PAPERLESS_CONSUME_PATH=/opt/paperless-ngx/consume
# PAPERLESS_EXPORT_PATH=/opt/paperless-ngx/export

# --- Optional: Email Consumption ---
# PAPERLESS_CONSUMPTION_MAIL_HOST=imap.example.com
# PAPERLESS_CONSUMPTION_MAIL_PORT=993
# PAPERLESS_CONSUMPTION_MAIL_USER=your_email@example.com
# PAPERLESS_CONSUMPTION_MAIL_PASS=your_email_password
# PAPERLESS_CONSUMPTION_MAIL_SSL=True
# PAPERLESS_CONSUMPTION_MAIL_INBOX=INBOX
# PAPERLESS_CONSUMPTION_MAIL_ACCOUNT=default # Optional: name the account