# compose/.env.example
#
# Copy to .env (gitignored) and fill in real values.
#
# Never commit .env. Forgejo PAT + Proton WG key + arr API keys = secrets.

# --- Timezone (logs + scheduling) ---
TZ=Europe/London

# --- Proton VPN (gluetun) ---
# Generate a dedicated WireGuard key in the Proton dashboard:
#   Account → WireGuard → New Configuration → name it "nullstone-gluetun-arr"
# Do NOT reuse the host's wg-pvpn-A/B keys.
PVPN_WG_PRIVKEY=REPLACE_WITH_PROTON_WG_PRIVATE_KEY
# The address Proton assigns to the new key (e.g. 10.2.0.3/32).
PVPN_WG_ADDRESSES=10.2.0.3/32
# Country (P2P-permitted). Comma-separated to let gluetun pick from a pool.
PVPN_SERVER_COUNTRIES=Netherlands

# --- Catalog service: Forgejo push ---
# https://git.s8n.ru → Settings → Applications → Generate New Token
# Scopes required: repository (read+write), user (read).
# Token is embedded in the remote URL inside the catalog container.
FORGEJO_PUSH_TOKEN=REPLACE_WITH_FORGEJO_PAT
# Remote URL — leave default unless beta-flix is moved.
FORGEJO_REMOTE=https://git.s8n.ru/s8n/beta-flix.git

# --- arr API keys ---
# Fetch from each app's Settings → General → Security after first launch.
# Used by catalog service to enrich the webhook payload via API calls.
SONARR_API_KEY=REPLACE_WITH_SONARR_API_KEY
RADARR_API_KEY=REPLACE_WITH_RADARR_API_KEY
PROWLARR_API_KEY=REPLACE_WITH_PROWLARR_API_KEY

# --- Optional: forwarded-port sync helper ---
# If you add caillef/qbittorrent-port-sync later for ratio-critical seeding,
# the qbt webui password goes here (used by that helper, not qbt itself).
QBT_WEBUI_PASSWORD=REPLACE_WITH_QBT_WEBUI_PASSWORD