.env.example

# Locksmith environment configuration
# Copy this file to .env and fill in the values.
# Never commit .env to source control.

# Path to the RSA private key PEM file (server-side only).
# Generate with: locksmith-setup --out-dir ./keys
LOCKSMITH_PRIVKEY_PATH=./keys/privkey.pem

# Path to the RSA public key PEM file.
# This is safe to distribute with your application.
LOCKSMITH_PUBKEY_PATH=./keys/pubkey.pem

# Admin API key for protected endpoints (POST /licenses, GET /licenses/{id}, DELETE /licenses/{id}).
# Generate a strong key with: python -c "import secrets; print(secrets.token_hex(32))"
LOCKSMITH_ADMIN_API_KEY=

# SQLAlchemy async database URL.
# SQLite (default, good for development):
LOCKSMITH_DB_URL=sqlite+aiosqlite:///./locksmith.db
# PostgreSQL (production example — requires asyncpg):
# LOCKSMITH_DB_URL=postgresql+asyncpg://user:password@localhost:5432/locksmith