---
# Portable config — values that hold regardless of whether Forgejo runs as a
# Compose stack on Unraid or natively in a Proxmox LXC. Platform-specific
# values (filesystem paths, how the database is reached) live in
# ../ansible/<platform>/vars.yml and are merged over these at deploy time.
env_defaults:
  FORGEJO_VERSION: "10"
  FORGEJO_HTTP_PORT: "3000"
  FORGEJO_SSH_PORT: "2222"
  FORGEJO_DOMAIN: git.turtlesystems.uk
  FORGEJO_ROOT_URL: "https://git.turtlesystems.uk"

  # The hostname Forgejo puts in the SSH clone URLs it advertises, kept
  # separate from FORGEJO_DOMAIN because the two need not resolve to the same
  # machine. SSH carries no hostname in its handshake — there is no SNI — so a
  # reverse proxy cannot route it by name the way it routes HTTP. A deployment
  # that terminates TLS on a proxy in front of Forgejo therefore has the web
  # domain pointing at the proxy and the SSH domain pointing at Forgejo
  # itself. Defaulted to FORGEJO_DOMAIN here, which is correct whenever
  # nothing sits in front; the platform that needs them to differ overrides it
  # (see ../ansible/proxmox/vars.yml).
  FORGEJO_SSH_DOMAIN: git.turtlesystems.uk
  DB_NAME: forgejo
  DB_USER: forgejo
  # DB_PASSWORD, SECRET_KEY, INTERNAL_TOKEN, JWT_SECRET are secrets — sourced
  # from Vault (homelab/forgejo), never set here.