.env.example

# Image is built and pushed by .gitea/workflows/docker.yml
IMAGE=your-registry.example.com/your-org/wisp:latest

# Public URL is fronted by a reverse proxy — this container just needs to
# listen on HOST_PORT.
HOST_PORT=3040

TTL_SECONDS=259200
MAX_UPLOAD_BYTES=209715200
UPLOAD_PASSWORD=change-me

# Optional. Unset disables the /admin invite-management page entirely
# (503, not a boot failure). Set to enable minting scoped upload invites.
ADMIN_PASSWORD=change-me-too
Implement wisp: async encrypted single-retrieval file drop Client-side libsodium encryption with the key in the URL fragment, an Express/SQLite server holding ciphertext until a confirm-token round trip proves successful decrypt (avoiding the delete-on-first-byte race), TTL sweep for unclaimed drops, and a password-gated upload UI styled to match flit. Dockerized to match the project family's conventions, with a named volume so the DB/blobs survive redeploys, and a Gitea Actions workflow to build and push the image. 2026-07-09 19:14:54 +02:00			`# Image is built and pushed by .gitea/workflows/docker.yml`
			`IMAGE=your-registry.example.com/your-org/wisp:latest`

			`# Public URL is fronted by a reverse proxy — this container just needs to`
			`# listen on HOST_PORT.`
			`HOST_PORT=3040`

			`TTL_SECONDS=259200`
			`MAX_UPLOAD_BYTES=209715200`
			`UPLOAD_PASSWORD=change-me`
Implement scoped upload invites Adds a second, narrower credential type alongside UPLOAD_PASSWORD: an admin (ADMIN_PASSWORD-gated, /admin) can mint time-boxed, use-limited, independently revocable invite links (?invite=<token>) that skip the password screen for one-off sharing without handing out the master password. Invite consumption is an atomic check-and-increment to avoid a race on single-use invites; admin surface 503s (not boot failure) when ADMIN_PASSWORD is unset. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> 2026-07-12 19:29:46 +02:00
			`# Optional. Unset disables the /admin invite-management page entirely`
			`# (503, not a boot failure). Set to enable minting scoped upload invites.`
			`ADMIN_PASSWORD=change-me-too`