# Template for .env in the deploy directory on the host:  cp .env-template .env
# .env holds secrets: it lives only on the host, is git-ignored and never part of config.tar.gz.

# --- Database ---
POSTGRES_PASSWORD=

# --- Tailscale ---
# Reusable auth key with tag:server from the Tailscale admin console.
TS_AUTHKEY=
# Machine name in the tailnet -> https://<TS_HOSTNAME>.tail276105.ts.net (default: repository name)
TS_HOSTNAME=

# --- Gitea registry (used by deploy.sh to download config.tar.gz) ---
# User + access token with package read scope for gitea.tail276105.ts.net.
GITEA_USER=
GITEA_TOKEN=
