Keep sanitized Compose sources in-repo with a confirmation-gated Ansible playbook, add repo-wide validation, tighten runbook ownership/STOP/review metadata, and archive stale research docs. Co-authored-by: Cursor <cursoragent@cursor.com>
40 lines
732 B
Bash
40 lines
732 B
Bash
# .env.example — PowerDNS stack (hk2.chans.xyz, /opt/pdns)
|
|
#
|
|
# Non-secret key reference ONLY. Real values live in the server-local .env
|
|
# (never commit them). Compose requires the `:?`-marked keys to be present.
|
|
|
|
# Runtime
|
|
TZ=Asia/Shanghai
|
|
|
|
# Postgres superuser (db + backup + pgweb)
|
|
PGUSER=
|
|
PGPASSWORD=
|
|
DB_HOST=db
|
|
DB_PORT=5432
|
|
|
|
# Application database (auth / poweradmin / backup)
|
|
DB_NAME=pdns
|
|
DB_USER=pdns
|
|
DB_PASS=
|
|
ADMIN_DB=pdnsadmin
|
|
|
|
# Backups
|
|
CRON_SCHEDULE=0 3 * * *
|
|
RETENTION_DAYS=7
|
|
MAX_BACKUPS=7
|
|
DUMP_ROLES=true
|
|
|
|
# PowerDNS auth API
|
|
PDNS_API_KEY=
|
|
|
|
# Poweradmin (first-run admin + session)
|
|
PA_SESSION_KEY=
|
|
PA_ADMIN_USERNAME=
|
|
PA_ADMIN_PASSWORD=
|
|
PA_ADMIN_EMAIL=
|
|
PA_ADMIN_FULLNAME=
|
|
|
|
# pgweb debug profile
|
|
PGWEB_USER=
|
|
PGWEB_PASS=
|