# Production .env for deploy/docker-compose.traefik.yml (VPS Tracker + Traefik).
# Copy to /opt/vps-tracker/.env and fill secrets. Do not commit.

# --- Traefik / Let's Encrypt (Cloudflare DNS-01) ---
CF_DNS_API_TOKEN=
LETSENCRYPT_EMAIL=admin@example.com
VPS_DOMAIN=vps.example.com
# TRAEFIK_IMAGE_TAG=v3.7
# TRAEFIK_HTTP_PORT=80
# TRAEFIK_HTTPS_PORT=443
# TRAEFIK_LOG_LEVEL=INFO

# --- Image ---
# Default: GHCR. For Gitea registry, e.g.:
# VPS_TRACKER_IMAGE=git.shts.su/denozord/vps-tracker
VPS_TRACKER_IMAGE=ghcr.io/denozordec/vps-tracker
VPS_TRACKER_IMAGE_TAG=latest

# --- Portal SSO (optional; leave AUTH_REQUIRED=false for local API token mode) ---
AUTH_REQUIRED=false
AUTH_JWT_SECRET=
AUTH_ISSUER=https://auth.shnt.top
AUTH_PORTAL_URL=https://auth.shnt.top