# InfluxDB 3 Core — runtime configuration
# Loaded by systemd via EnvironmentFile=/etc/influxdb/influxdb.env
# Full env var reference: https://docs.influxdata.com/influxdb3/core/reference/cli/influxdb3/serve/
#
# Default-secure posture:
#   - Loopback bind (override of upstream's 0.0.0.0:8181 default)
#   - Local-disk object store (no cloud uplink unless operator opts in)
#   - Python plugin runtime DISABLED (PACKAGE_MANAGER=disabled)
#   - Auth required (no INFLUXDB3_START_WITHOUT_AUTH override; operator
#     bootstraps an admin token after first start with:
#       influxdb3 create token --admin)

# HTTP API — loopback only. Operator changes to 0.0.0.0:8181 (or a
# specific interface IP) to expose, but should pair that with a reverse
# proxy + TLS (the on-box HTTP API speaks plaintext HTTP by default).
INFLUXDB3_HTTP_BIND_ADDR=127.0.0.1:8181

# Node identity. Required at startup. Single-node default; operator
# changes when joining a cluster.
INFLUXDB3_NODE_IDENTIFIER_PREFIX=influxdb3-local

# Object store — local filesystem. The aws/azure/gcp features compiled
# in expand operator options at runtime; flip INFLUXDB3_OBJECT_STORE to
# s3/azure/google + set the relevant credential env vars to use a cloud
# bucket instead.
INFLUXDB3_OBJECT_STORE=file
INFLUXDB3_DB_DIR=/var/lib/influxdb

# Python plugin runtime — disabled by default. Operator opts in by
# setting INFLUXDB3_PACKAGE_MANAGER to one of: discover, pip, uv.
# AppArmor profile constrains the in-process Python interpreter
# regardless of which manager is picked.
INFLUXDB3_PACKAGE_MANAGER=disabled

# Telemetry upload — opt-out by default. InfluxData's anonymous usage
# reporting is OFF; operator may flip to false to enable.
INFLUXDB3_DISABLE_TELEMETRY_UPLOAD=true
