# CloudGate Environment Configuration
#
# IMPORTANT: ALL of these are OPTIONAL.
# If unset, CloudGate generates secure defaults at first boot and stores them in /data/secrets/.
# You do NOT need to set anything to run CloudGate — `docker run` works as-is.
#
# Use this file ONLY if you want to override defaults (e.g. bring your own keys, set a specific admin email).

# --- Bootstrap & Admin -------------------------------------------------------

# Normally you don't set anything here: open the web UI on first boot and
# the Setup page walks you through creating your admin account interactively.
# These two are for headless/automated installs (scripted deploys, IaC) that
# need the admin account to exist without anyone visiting the UI first.

# Initial admin email. Only used together with CLOUDGATE_INITIAL_ADMIN_PASSWORD. Default: admin@cloudgate.local
# CLOUDGATE_INITIAL_ADMIN_EMAIL=admin@example.com

# Initial admin password for headless installs. If set, the admin account is created
# at first boot with this password (forced change on first login) and the web UI's
# Setup page is skipped — you already know the password, so nothing is written to
# a file or logged. If unset (the normal case), no admin exists until you complete
# the Setup page in the web UI.
# CLOUDGATE_INITIAL_ADMIN_PASSWORD=

# How long (in minutes) the first-run Setup page / API stays open after the process
# starts, and how long the unauthenticated first-run restore stays open too. Restarting
# the container/app reopens it. Default: 30. Min: 1, max: 1440 (24h).
# CLOUDGATE_SETUP_WINDOW_MINUTES=30

# --- Secrets (auto-generated if unset) ---------------------------------------

# 32-byte base64 key for token encryption (AES-256-GCM).
# Generated to /data/secrets/encryption.key on first boot if unset.
# CLOUDGATE_ENCRYPTION_KEY=

# JWT signing secret. Generated to /data/secrets/jwt.key on first boot if unset.
# CLOUDGATE_JWT_SECRET=

# --- Database ----------------------------------------------------------------

# Default: sqlite:///data/db/db.sqlite
# CLOUDGATE_DB_URL=

# --- Logging -----------------------------------------------------------------

# CLOUDGATE_LOG_LEVEL=info
# TZ=UTC

# --- Auto-Update -------------------------------------------------------------

# Channel: stable | prerelease | nightly | disabled. Default: stable
# Initial value only — user can change later in /settings/updates UI.
# CLOUDGATE_UPDATE_CHANNEL=stable

# Mode: auto | notify | scheduled. Default: notify
# CLOUDGATE_UPDATE_MODE=notify

# Override the source repo (for forks or testing). Default: Elias02345/CloudGate
# CLOUDGATE_UPDATE_REPO=Elias02345/CloudGate

# Optional GitHub token for higher API rate limits (60 req/h anon → 5000 req/h with token).
# CLOUDGATE_GITHUB_TOKEN=

# Notbremse: set to true to fully disable the self-updater (for maintainer debugging).
# CLOUDGATE_DISABLE_UPDATES=false

# Manually force recovery UI on next boot (e.g. when DB is unreachable).
# CLOUDGATE_RECOVERY_MODE=false

# --- User/Group (LinuxServer.io-style) ---------------------------------------

# PUID=1000
# PGID=1000