# Copy to `.env` (deploy/compose/.env is gitignored) and adjust.
# Used by docker-compose.prod.yml.

# ── Required ────────────────────────────────────────────────
# Session HMAC key — protects every login. Generate a REAL random value; the
# control plane refuses to start in production with a default/weak one:
#   RP_SESSION_SECRET=$(openssl rand -hex 32)
RP_SESSION_SECRET=

# Runs in production by default (secure): the dev-login bypass is OFF — create the
# first account at /setup, or configure Google SSO below. Set RP_ENV=dev ONLY for
# a throwaway localhost trial where an open login is acceptable.
# RP_ENV=production

# ── URLs ────────────────────────────────────────────────────
# Where your BROWSER reaches the control plane (OAuth redirects etc.).
RP_PUBLIC_URL=http://localhost:8090
# Where your KUBERNETES CLUSTERS reach the control plane. Leave empty for a
# local/minikube trial; set it to a URL routable from inside the cluster before
# connecting a real remote cluster (e.g. https://rocketplane.your-domain.com).
RP_AGENT_CONTROLPLANE_URL=
# Where Beyla (in your cluster) ships OTLP traces/metrics. Leave empty to derive
# it from RP_AGENT_CONTROLPLANE_URL (same host, port 4318) — correct for this
# co-located stack. Set it only if your collector runs elsewhere.
RP_AGENT_OTLP_ENDPOINT=

# ── Image version ───────────────────────────────────────────
# Pinned to a released version (stable). `edge` tracks main (unstable) — use it
# only if you want the latest unreleased changes.
RP_VERSION=0.7.13

# ── Data stores (defaults just work for a trial) ────────────
CLICKHOUSE_USER=rocketplane
CLICKHOUSE_PASSWORD=change-me
CLICKHOUSE_DB=otel
POSTGRES_USER=rocketplane
POSTGRES_PASSWORD=change-me
POSTGRES_DB=rocketplane

# ── Optional: Google SSO (otherwise use the /setup first-user flow) ───────
# GOOGLE_CLIENT_ID=
# GOOGLE_CLIENT_SECRET=