# =============================================================================
# Collaboration Stack - Production Environment
# =============================================================================
# Copy to .env and fill in real values

# Domain
DOMAIN=toppyr.de

# Let's Encrypt
ACME_EMAIL=mail@example.com

# Traefik Dashboard (htpasswd format: user:hash)
TRAEFIK_AUTH=admin:$apr1$...

# Keycloak
KEYCLOAK_DB_PASSWORD=<generate-secure-password>
KEYCLOAK_ADMIN_PASSWORD=<generate-secure-password>

# OIDC Client Secret (shared across services)
OIDC_CLIENT_SECRET=<generate-secure-password>

# OpenProject
OPENPROJECT_SECRET=<generate-64-char-hex>
OPENPROJECT_ADMIN_PASSWORD=<generate-secure-password>

# XWiki
XWIKI_DB_ROOT_PASSWORD=<generate-secure-password>
XWIKI_DB_PASSWORD=<generate-secure-password>

# Nextcloud
NEXTCLOUD_DB_PASSWORD=<generate-secure-password>
NEXTCLOUD_ADMIN_PASSWORD=<generate-secure-password>

# EspoCRM
ESPOCRM_DB_PASSWORD=<generate-secure-password>
ESPOCRM_ADMIN_PASSWORD=<generate-secure-password>

# Mautic
MAUTIC_DB_PASSWORD=<generate-secure-password>

# FreeScout
FREESCOUT_DB_PASSWORD=<generate-secure-password>
FREESCOUT_ADMIN_PASSWORD=<generate-secure-password>

# Gitea
GITEA_DB_PASSWORD=<generate-secure-password>

# OpenProject API (for Gitea webhook)
OPENPROJECT_API_KEY=<generate-from-openproject>