# Base directory on the host for all persistent data (compose defaults to /data if unset)
DATA_DIR=/data

# ---------------------------
# Published ports (host side)
# ---------------------------

# Keycloak HTTP host port
KEYCLOAK_HTTP_PUBLISHED_PORT=8080

# Caddy host ports
CADDY_HTTP_PUBLISHED_PORT=80
CADDY_HTTPS_PUBLISHED_PORT=443

# Nextcloud signaling host port
SIGNALING_PUBLISHED_PORT=8090

# GitLab SSH host port
GITLAB_SSH_PUBLISHED_PORT=2222

# Janus published ports
JANUS_HTTP_PUBLISHED_PORT=8088
JANUS_HTTPS_PUBLISHED_PORT=8089
JANUS_ADMIN_HTTP_PUBLISHED_PORT=8188
JANUS_ADMIN_HTTPS_PUBLISHED_PORT=8889
JANUS_RTP_PUBLISHED_PORT=8000
JANUS_WS_PUBLISHED_PORT=7088
JANUS_WSS_PUBLISHED_PORT=7089

# TURN published ports
TURN_PORT=3478
TURN_TLS_PORT=5349

# ---------------------------
# Keycloak
# ---------------------------

# Keycloak DB mode/vendor (as used by Keycloak)
KC_DB=dev-file
# Enable HTTP listener (true/false)
KC_HTTP_ENABLED=true
# Public hostname for Keycloak
KC_HOSTNAME=keycloak.data-pro.nu
# Proxy headers mode (e.g. xforwarded)
KC_PROXY_HEADERS=xforwarded
# Proxy mode (e.g. edge)
KC_PROXY=edge
# Enforce strict hostname checks (true/false)
KC_HOSTNAME_STRICT=false
# Enforce strict HTTPS hostname checks (true/false)
KC_HOSTNAME_STRICT_HTTPS=false
# Enable metrics endpoint (true/false)
KC_METRICS_ENABLED=true
# Enable health endpoint (true/false)
KC_HEALTH_ENABLED=true
# Log level (e.g. info, debug)
KC_LOG_LEVEL=info
# Bootstrap admin username (first-run)
KC_BOOTSTRAP_ADMIN_USERNAME=admin
# Bootstrap admin password (first-run secret)
KC_BOOTSTRAP_ADMIN_PASSWORD=admin

# ---------------------------
# Nextcloud
# ---------------------------

# MariaDB password for the Nextcloud DB user (secret)
NEXTCLOUD_MYSQL_PASSWORD=MySQL2
# Nextcloud database name
NEXTCLOUD_MYSQL_DATABASE=nextcloud
# Nextcloud database user
NEXTCLOUD_MYSQL_USER=nextcloud
# MariaDB host (service name)
NEXTCLOUD_MYSQL_HOST=mariadb
# Redis host (service name)
NEXTCLOUD_REDIS_HOST=redis

# ---------------------------
# Signaling
# ---------------------------

# Path to signaling config inside the container
SIGNALING_CONFIG=/config/server.conf

# ---------------------------
# GitLab
# ---------------------------

# GitLab container hostname
GITLAB_HOSTNAME=gitlab.data-pro.nu
# GitLab external URL (used in omnibus config)
GITLAB_EXTERNAL_URL=https://gitlab.data-pro.nu

# ---------------------------
# Gitea
# ---------------------------

# Public hostname for Gitea
GITEA_DOMAIN=gitea.data-pro.nu
# Public root URL (must match how users access it)
GITEA_ROOT_URL=https://gitea.data-pro.nu/
# Internal HTTP port Gitea listens on inside container (usually 3000)
GITEA_HTTP_PORT=3000
# UID for file ownership on the host volume (match your server user, often 1000)
GITEA_USER_UID=1000
# GID for file ownership on the host volume (match your server group, often 1000)
GITEA_USER_GID=1000
# Hostname used in SSH clone URLs shown by Gitea
GITEA_SSH_DOMAIN=gitea.data-pro.nu
# SSH port shown in clone URLs (22 if not publishing a different host port)
GITEA_SSH_PORT=22
# OPTIONAL: host port to publish for Gitea SSH (only if you enable ports mapping in compose)
GITEA_SSH_PUBLISHED_PORT=2223

# ---------------------------
# Collabora
# ---------------------------

# Collabora 'domain' regex (escaped for .env)
COLLABORA_DOMAIN_REGEX=nextcloud\\.data\\-pro\\.nu
# Collabora admin username
COLLABORA_USERNAME=admin
# Collabora admin password (secret)
COLLABORA_PASSWORD=1Collabora2@
# Collabora runtime flags (quoted because it contains spaces)
COLLABORA_EXTRA_PARAMS="--o:ssl.enable=false --o:ssl.termination=true"

# ---------------------------
# MariaDB
# ---------------------------

# MariaDB root password (secret)
MYSQL_ROOT_PASSWORD=1MySQLRoot12!
# MariaDB initial database name
MARIADB_MYSQL_DATABASE=nextcloud
# MariaDB initial user
MARIADB_MYSQL_USER=nextcloud
# MariaDB initial user password (secret)
MARIADB_MYSQL_PASSWORD=MySQL2

#---------------------------
#  n8n
# ---------------------------

N8N_HOST=n8n.data-pro.nu
N8N_PROTOCOL=https
N8N_WEBHOOK_URL=https://n8n.data-pro.nu/
N8N_ENCRYPTION_KEY=change_me_to_a_long_random_string
N8N_SECURE_COOKIE=true
N8N_TIMEZONE=Europe/AmsterdamN8N_HOST=n8n.data-pro.nu
N8N_PROTOCOL=https
N8N_WEBHOOK_URL=https://n8n.data-pro.nu/
N8N_ENCRYPTION_KEY=change_me_to_a_long_random_string
N8N_SECURE_COOKIE=true
N8N_TIMEZONE=Europe/Amsterdam