# n8n configuration
N8N_API_URL=https://your-n8n.example.com
N8N_API_KEY=replace-with-api-key
N8N_VERSION=1.64.0
# SECURITY NOTES:
# - NEVER commit .env files to version control (already in .gitignore)
# - Use strong, unique API keys (min 32 characters recommended)
# - Rotate API keys regularly
# - Restrict file permissions: chmod 600 .env
# - Consider using a secrets manager in production (e.g., Vault, AWS Secrets Manager)
# - Audit logs automatically redact sensitive fields (password, api_key, token, etc.)
# logging and ops
LOG_LEVEL=info
AUDIT_LOG_PATH=./audit.log
RATE_LIMIT=60
MAX_PAYLOAD_BYTES=1048576
ENABLE_UI=false
# optional for UI
OPTIONAL_WEBHOOK_TEST_URL=