# Copy this file to .env and adjust it before running Docker Compose.
#
# Usage:
#   cp .env.example .env
#   $EDITOR .env
#   docker compose up -d

# PostgreSQL connection used by the Trustpoint containers.
# Development default: admin / testing321
# Use a long, randomly generated password outside local testing:
#   openssl rand -base64 32
POSTGRES_DB=trustpoint_db
DATABASE_USER=admin
DATABASE_PASSWORD=testing321
DATABASE_HOST=postgres
DATABASE_PORT=5432

# TLS Server Certificate Configuration
# Comma-separated lists of addresses/names where Trustpoint is reachable.
# These are used for:
# - Subject Alternative Names (SANs) in the TLS certificate
# - Django ALLOWED_HOSTS and CSRF_TRUSTED_ORIGINS
# At least one value must be specified for production deployments.
TP_TLS_IPV4_ADDRESSES=127.0.0.1
TP_TLS_IPV6_ADDRESSES=::1
TP_TLS_DNS_NAMES=localhost

# HTTP and HTTPS ports for external access
# Only include non-standard ports in CSRF_TRUSTED_ORIGINS (default: 80 for HTTP, 443 for HTTPS)
# TP_HTTP_PORT=80
# TP_HTTPS_PORT=443

# Optional mail settings. Leave EMAIL_HOST empty to use Django's console backend.
# DEFAULT_FROM_EMAIL=no-reply@trustpoint.de
# EMAIL_HOST=
# EMAIL_PORT=587
# EMAIL_USE_TLS=
# EMAIL_USE_SSL=
# EMAIL_HOST_USER=
# EMAIL_HOST_PASSWORD=
# EMAIL_TIMEOUT=10

# ========================================================================
# Auto-Setup Configuration (Skip Setup Wizard)
# ========================================================================
# If TP_AUTO_SETUP=true, Trustpoint will automatically configure itself
# from environment variables, bypassing the interactive setup wizard.

# Enable automatic setup from environment variables (true/false)
# TP_AUTO_SETUP=false

# Superuser credentials (REQUIRED if TP_AUTO_SETUP=true)
# TP_ADMIN_USERNAME=admin
# TP_ADMIN_PASSWORD=testing321

# Inject demo data for testing (true/false)
# TP_INJECT_DEMO_DATA=false

# Note: When auto-setup is enabled, the TLS certificate will be automatically
# generated using the TP_TLS_* variables specified above.