Added Formbricks

services/formbricks/.env

@@ -3,20 +3,221 @@
 #COMPOSE_PROJECT_NAME= # Optional: only use when running multiple deployments on the same infrastructure.
 
 # Service Configuration
-SERVICE=formbricks
+SERVICE=formbricks # Service name (e.g., adguard). Used as hostname in Tailscale and for container naming (app-${SERVICE}).
 IMAGE_URL=ghcr.io/formbricks/formbricks:latest
 
 # Network Configuration
-SERVICEPORT=3000
-DNS_SERVER=9.9.9.9
+SERVICEPORT=3000 # Port to expose to local network. Uncomment the "ports:" section in compose.yaml to enable.
+DNS_SERVER=9.9.9.9 # Preferred DNS server for Tailscale. Uncomment the "dns:" section in compose.yaml to enable.
 
 # Tailscale Configuration
-TS_AUTHKEY=
+TS_AUTHKEY= # Auth key from https://tailscale.com/admin/authkeys. See: https://tailscale.com/kb/1085/auth-keys#generate-an-auth-key for instructions.
 
 # Time Zone setting for containers 
 TZ=Europe/Amsterdam # See: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
 
 # Optional Service variables
 # PUID=1000
 
-#EXAMPLE_VAR="Environment varibale"
+# Any Container environment variables are declared below. See https://docs.docker.com/compose/how-tos/environment-variables/
+
+######################################################## REQUIRED ########################################################
+
+# Your tailnet domain
+TS_URL="formbricks.<YOUR_TAILNET>.ts.net"
+
+# The url of your Formbricks instance used in the admin panel
+# Set this to your public-facing URL, e.g., https://example.com
+WEBAPP_URL=http://${TS_URL}:3000
+
+# Required for next-auth. Should be the same as WEBAPP_URL
+NEXTAUTH_URL=${WEBAPP_URL}
+
+# Set the below to your public domain (default is WEBAPP_URL)
+PUBLIC_URL=${WEBAPP_URL}
+
+# PostgreSQL DB for Formbricks to connect to
+DATABASE_URL="postgresql://postgres:postgres@postgres:5432/formbricks?schema=public"
+
+# NextJS Auth
+# @see: https://next-auth.js.org/configuration/options#nextauth_secret
+# You can use: `openssl rand -hex 32` to generate a new one
+NEXTAUTH_SECRET="7b62c37371798cf96dc019f3d4f712a27d1b05d0755ffcf96481b8504697f532"
+
+# Encryption Key is used for 2FA & Single use URLs for Link Surveys
+# You can use: `openssl rand -hex 32` to generate a new one
+ENCRYPTION_KEY="i1e284266e3f7ace4772e329e0494aa1d6110fba48db06bd9652e7a9fdd167281"
+
+# API Secret for running cron jobs.
+# You can use: `openssl rand -hex 32` to generate a new one
+CRON_SECRET="b5af3d39789e7730004a01bb84922914ea0b478fe67784ce3fa8e4c35096d6b4"
+
+# Redis URL for caching, rate limiting, and audit logging
+# To use external Redis/Valkey: remove the redis service below and update this URL
+REDIS_URL="redis://redis:6379"
+
+# Set the minimum log level(debug, info, warn, error, fatal)
+LOG_LEVEL="info"
+
+############################################# OPTIONAL (ENTERPRISE EDITION) #############################################
+
+# Enterprise License Key (More info at: https://formbricks.com/docs/self-hosting/license)
+# Required to access Enterprise-only features
+# ENTERPRISE_LICENSE_KEY=""
+
+############################################# OPTIONAL (EMAIL CONFIGURATION) #############################################
+
+# Email Configuration
+MAIL_FROM="from@some.host"
+MAIL_FROM_NAME="from host"
+SMTP_HOST="some.host"
+SMTP_PORT="587"
+SMTP_USER="SMTPUser"
+SMTP_PASSWORD="SMTPPassword"
+SMTP_AUTHENTICATED="1"
+
+# (Additional option for TLS (port 465) only)
+SMTP_SECURE_ENABLED="0"
+
+# If set to 0, the server will accept connections without requiring authorization from the list of supplied CAs (default is 1).
+SMTP_REJECT_UNAUTHORIZED_TLS="1"
+
+############################################## OPTIONAL (APP CONFIGURATION) ##############################################
+
+# Set the below to 0 to enable Email Verification for new signups (will required Email Configuration)
+EMAIL_VERIFICATION_DISABLED="1"
+
+# Set the below to 0 to enable Password Reset (will required Email Configuration)
+PASSWORD_RESET_DISABLED="1"
+
+# Set the below to 1 to disable logins with email
+EMAIL_AUTH_DISABLED="0"
+
+# Set the below to 1 to disable invites
+INVITE_DISABLED="0"
+
+# Set the below if you want to ship JS & CSS files from a complete URL instead of the current domain
+# ASSET_PREFIX_URL=""
+
+# Set the below to your Unsplash API Key for their Survey Backgrounds
+# UNSPLASH_ACCESS_KEY=""
+
+# The SENTRY_DSN is used for error tracking and performance monitoring with Sentry.
+
+# SENTRY_DSN=""
+
+# It's used for authentication when uploading source maps to Sentry, to make errors more readable.
+# SENTRY_AUTH_TOKEN=""
+
+# The SENTRY_ENVIRONMENT is used to identify the environment in Sentry.
+# SENTRY_ENVIRONMENT=""
+
+################################################### OPTIONAL (STORAGE) ###################################################
+
+# Set S3 Storage configuration (required for the file upload in serverless environments like Vercel)
+# S3_ACCESS_KEY=""
+# S3_SECRET_KEY=""
+# S3_REGION=""
+# S3_BUCKET_NAME=""
+
+# Set a third party S3 compatible storage service endpoint like StorJ leave empty if you use Amazon S3
+# S3_ENDPOINT_URL=""
+
+# Force path style for S3 compatible storage (0 for disabled, 1 for enabled)
+S3_FORCE_PATH_STYLE="0"
+
+############################################# OPTIONAL (OAUTH CONFIGURATION) #############################################
+
+# Set the below from Cloudflare Turnstile if you want to enable turnstile in signups
+# TURNSTILE_SITE_KEY=""
+# TURNSTILE_SECRET_KEY=""
+
+# Set the below keys to enable recaptcha V3 for survey responses bot protection(only available in the Enterprise Edition)
+# RECAPTCHA_SITE_KEY=""
+# RECAPTCHA_SECRET_KEY=""
+
+# Set the below from GitHub if you want to enable GitHub OAuth
+# GITHUB_ID=""
+# GITHUB_SECRET=""
+
+# Set the below from Google if you want to enable Google OAuth
+# GOOGLE_CLIENT_ID=""
+# GOOGLE_CLIENT_SECRET=""
+
+# Set the below from Azure Active Directory Login if you want to enable Azure AD OAuth
+# AZUREAD_CLIENT_ID=""
+# AZUREAD_CLIENT_SECRET=""
+# AZUREAD_TENANT_ID=""
+
+# Set the below to OpenID Connect Provider if you want to enable OIDC
+# OIDC_CLIENT_ID=""
+# OIDC_CLIENT_SECRET=""
+# OIDC_ISSUER=""
+# OIDC_DISPLAY_NAME=""
+# OIDC_SIGNING_ALGORITHM=""
+
+# Set the below to SAML Provider if you want to enable SAML
+# SAML_DATABASE_URL="postgresql://postgres:postgres@postgres:5432/formbricks-saml?sslmode=disable"
+
+########################################## OPTIONAL (THIRD PARTY INTEGRATIONS) ###########################################
+
+# Oauth credentials for Notion Integration
+# NOTION_OAUTH_CLIENT_ID=""
+# NOTION_OAUTH_CLIENT_SECRET=""
+
+# Oauth credentials for Google Sheet Integration
+# GOOGLE_SHEETS_CLIENT_ID=""
+# GOOGLE_SHEETS_CLIENT_SECRET=""
+# GOOGLE_SHEETS_REDIRECT_URL=""
+
+# Oauth credentials for Airtable Integration
+# AIRTABLE_CLIENT_ID=""
+
+# Oauth credentials for Slack Integration
+# SLACK_CLIENT_ID=""
+# SLACK_CLIENT_SECRET=""
+
+############################################### OPTIONAL (LEGAL INFORMATION) ################################################
+
+# Set the below to have your own Privacy Page URL on auth & link survey page
+# PRIVACY_URL=""
+
+# Set the below to have your own Terms Page URL on auth & link survey page
+# TERMS_URL=""
+
+# Set the below to have your own Imprint Page URL on auth & link survey page
+# IMPRINT_URL=""
+
+# Set the below to have your own Address on email footer
+# IMPRINT_ADDRESS=""
+
+########################################## OPTIONAL (SERVER CONFIGURATION) ###########################################
+
+# Set the below to 1 to disable Rate Limiting across Formbricks
+RATE_LIMITING_DISABLED="1"
+
+# Set the below to send OpenTelemetry data for tracing
+# OPENTELEMETRY_LISTENER_URL="http://localhost:4318/v1/traces"
+
+########################################## OPTIONAL (AUDIT LOGGING) ###########################################
+
+# Set the below to 1 to enable audit logging.
+AUDIT_LOG_ENABLED="1"
+
+# Set the below to get the ip address of the user from the request headers
+AUDIT_LOG_GET_USER_IP="1"
+
+############################################# OPTIONAL (OTHER) #############################################
+
+# signup is disabled by default for self-hosted instances, users can only signup using an invite link, in order to allow signup from SSO(without invite), set the below to 1
+AUTH_SKIP_INVITE_FOR_SSO="0"
+
+# Set the below to automatically assign new users to a specific team, insert an existing team id
+# (Role Management is an Enterprise feature)
+# AUTH_SSO_DEFAULT_TEAM_ID=""
+
+# Configure the minimum role for user management from UI(owner, manager, disabled)
+USER_MANAGEMENT_MINIMUM_ROLE="manager"
+
+# Configure the maximum age for the session in seconds. Default is 86400 (24 hours)
+SESSION_MAX_AGE="86400"