Keep sanitized Compose sources in-repo with a confirmation-gated Ansible playbook, add repo-wide validation, tighten runbook ownership/STOP/review metadata, and archive stale research docs. Co-authored-by: Cursor <cursoragent@cursor.com>
39 lines
797 B
Bash
39 lines
797 B
Bash
# .env.example — Vaultwarden (us2.wsvc.info, /opt/vaultwarden)
|
|
#
|
|
# Non-secret key reference ONLY. Real values live in the server-local .env
|
|
# (never commit them). Copy the keys below into the server .env if a key is
|
|
# missing; the compose file requires them via ${VAR} / env_file.
|
|
|
|
# Service identity
|
|
DOMAIN=https://auth.wsvc.info
|
|
TEMPLATES_FOLDER=
|
|
|
|
# Postgres (compose services vaultwarden / backup / pg / pgweb)
|
|
DB_HOST=pg
|
|
DB_PORT=5432
|
|
DB_NAME=vaultwarden
|
|
DB_USER=vaultwarden
|
|
DB_PASS=
|
|
|
|
# pgweb debug profile
|
|
PGWEB_USER=
|
|
PGWEB_PASS=
|
|
PGWEB_DATABASE_URL=
|
|
|
|
# SMTP (mailcow mx2.windy.me:587 starttls)
|
|
SMTP_HOST=mx2.windy.me
|
|
SMTP_PORT=587
|
|
SMTP_SECURITY=starttls
|
|
SMTP_USERNAME=
|
|
SMTP_PASSWORD=
|
|
SMTP_FROM=
|
|
HELO_NAME=
|
|
|
|
# Admin console
|
|
ADMIN_TOKEN=
|
|
|
|
# Runtime
|
|
UID=1000
|
|
GID=1000
|
|
IP_HEADER=X-Forwarded-For
|