# =============================================================================
# SocialiseIT Environment Variables (Advanced Deployments Only)
# =============================================================================
#
# NOTE: For quickstart, you don't need this file at all!
# Just run: docker compose up -d
# Secrets are auto-generated on first boot.
#
# This file is only for advanced deployments (Portainer, custom domain, HTTPS).
# Copy to stack.env and fill in only the values you need to customize.
# =============================================================================

# The public URL where your app will be accessed (required for OAuth callbacks)
APP_URL=https://socialiseit.yourdomain.com

# Security — auto-generated in quickstart mode, set manually for Portainer
# Generate with: openssl rand -base64 32
# AUTH_SECRET=
# ENCRYPTION_KEY=

# Database (defaults work for the bundled PostgreSQL container)
# POSTGRES_USER=postgres
# POSTGRES_PASSWORD=socialiseit
# POSTGRES_DB=socialiseit

# Redis (defaults work for the bundled Redis container)
# REDIS_PASSWORD=socialiseit_redis

# MinIO/S3 (defaults work for the bundled MinIO container)
# MINIO_ROOT_USER=minioadmin
# MINIO_ROOT_PASSWORD=minioadmin
# S3_ENDPOINT=http://socialiseit-minio:9000
# S3_BUCKET=socialiseit

# Public CDN URL for media (optional — only if proxying MinIO via NPM/Caddy)
# S3_PUBLIC_URL=https://cdn.socialiseit.yourdomain.com

# Google OAuth (optional — for "Sign in with Google")
# AUTH_GOOGLE_ID=
# AUTH_GOOGLE_SECRET=

# Meta Webhooks (optional — for real-time comment/DM sync)
# META_WEBHOOK_VERIFY_TOKEN=your_secure_random_string

# Meta Ad Library fallback (optional — Seb uses a connected Facebook/Instagram
# account first, then this token if no connected Meta token is available.)
# Use a Meta app/user token with Ad Library API access if setting this manually.
# META_AD_LIBRARY_ACCESS_TOKEN=
# META_AD_LIBRARY_COUNTRIES=GB

# NOTE: Social Platform APIs (Instagram, Facebook, TikTok, YouTube, etc.)
# are configured via the Setup Wizard UI, not environment variables.
# They are stored encrypted in the database.