Interactive .env Generator

Use this interactive questionnaire to quickly generate a clean, secure .env file tailored for your deployment.

🔒

100% Client-Side Cryptography: All passwords and cryptographic secrets are generated in your browser memory using window.crypto. Zero network telemetry or data retention.

Start from:

⚡ MinimalJust the 5 values a standard install needs⚙️ All OptionsEvery section turned on, ready to trim

🔑 Core Essentials

Required for all Docker Compose and bare-metal setups

Application Access URL SPARKY_FITNESS_FRONTEND_URL

Quick fill:

The public address you open in your browser or mobile app. Essential for CORS security and cookie sessions. For a direct or LAN address the port must match SPARKY_FITNESS_FRONTEND_PORT (3004), which is kept in step for you; behind a reverse proxy the URL has no port and none is added.

PostgreSQL Superuser

The account that owns the schema and runs migrations. The database name, host and the restricted application user all have working defaults — change them in Database Names & Connection below if you need to.

Setting up for the first time? Pick these now. PostgreSQL reads them only while it initialises an empty data directory; on every later start it keeps the credentials it already has. Changing them here afterwards does not rename the user or change the password — it only changes what the server tries to log in with, and the connection then fails. To rotate them on a running instance, ALTER the role inside PostgreSQL first, then put the new values here so the two match.

Superuser User SPARKY_FITNESS_DB_USERAdmin database user for migrations and RLS policies.

Superuser Password SPARKY_FITNESS_DB_PASSWORD

Database superuser password.

Security & Encryption Keys

Cryptographic secrets used to protect stored data and authenticate active sessions.

API Encryption Key SPARKY_FITNESS_API_ENCRYPTION_KEY

64-character Hex string (256-bit AES). Encrypts external API keys and tokens in Postgres.

Better Auth Secret BETTER_AUTH_SECRET

Signs session JWTs and encrypts TOTP 2-Factor Authentication keys. Keep persistent.

Optional Configuration ModulesSelect what you need for your deployment environment

💾 Persistent Host Storage PathsClick to Enable

⚙️ Server RuntimeClick to Enable

🛡️ Admin, Signups & Access PolicyClick to Enable

✉️ SMTP Email NotificationsClick to Enable

🔑 OpenID Connect (OIDC / SSO)Click to Enable

⌚ Garmin Connect MicroserviceClick to Enable

⏱️ Sign-in & API Key Rate LimitingClick to Enable

🗄️ Database Names & ConnectionUsing defaults

🌐 Nginx, Ports & Reverse Proxy HeadersClick to Enable

🛡️ Outbound Corporate / Forwarding ProxyClick to Enable

🧪 Public Demo ModeOff

Generated .env Output

Save this as .env in the same directory as your docker-compose.yml

⚠️ Check this before you use it. This generator is new and may still get things wrong. Read the output, confirm the values match your deployment — especially ports, paths and URLs — and keep a copy of any existing .env before replacing it. See the Environment Variables reference for what each setting does.

Hidden by default — it contains your database password, encryption key and auth secret in clear text. You do not need to reveal it to copy or download the file.

---

What to do with the generated .env file?

1. Place the generated .env file in the same directory as your docker-compose.yml.
2. Run:

   docker compose pull && docker compose up -d

3. Open your browser to the URL you configured above (e.g. http://localhost:3004).
4. Register your account. Unless you set SPARKY_FITNESS_DISABLE_SIGNUP=true, the very first user to sign up is granted full Administrator privileges. If you set SPARKY_FITNESS_ADMIN_EMAIL, register with that address — the server promotes the matching account on every startup.
5. Configure the rest from the right place for each feature:
   • AI providers and OpenFoodFacts — Admin > System Settings in the web interface.
   • Garmin — each user connects their own account under their integration settings.
   • SMTP — environment variables only; use the SMTP module in the generator above.