metron.env.example

# Copy this file to ~/.config/containers/metron.env on the droplet and fill in all values.
# Permissions must be 0600: chmod 600 ~/.config/containers/metron.env

# ── PostgreSQL ─────────────────────────────────────────────────────────────────
# Used by the postgres container (POSTGRES_*) and by Django (DB_*)
# Keep the values in both sets in sync.
POSTGRES_DB=metron
POSTGRES_USER=metron
POSTGRES_PASSWORD=changeme

DB_NAME=metron
DB_USER=metron
DB_PASSWORD=changeme
# metron-web runs with Network=host; postgres/redis publish to the host loopback.
DB_HOST=127.0.0.1

# ── Redis ──────────────────────────────────────────────────────────────────────
REDIS_URL=redis://127.0.0.1:6379/0
THUMBNAIL_REDIS_HOST=127.0.0.1

# ── Django ─────────────────────────────────────────────────────────────────────
SECRET_KEY=changeme
DEBUG=False
ALLOWED_HOSTS=metron.cloud,www.metron.cloud

# ── DigitalOcean Spaces (static + media storage) ──────────────────────────────
DO_ACCESS_KEY_ID=
DO_SECRET_ACCESS_KEY=
DO_STORAGE_BUCKET_NAME=
DO_S3_ENDPOINT_URL=
DO_S3_CUSTOM_DOMAIN=

# ── DigitalOcean Spaces (database backups) ────────────────────────────────────
# A dedicated bucket separate from the media/static bucket.
# Set a 90-day lifecycle expiry rule on this bucket via the DO control panel.
DO_BACKUP_BUCKET_NAME=

# ── Email ──────────────────────────────────────────────────────────────────────
EMAIL_BACKEND=django.core.mail.backends.smtp.EmailBackend
EMAIL_HOST=
EMAIL_USER=
EMAIL_PASSWORD=
EMAIL_FROM=

# ── Pushover notifications ─────────────────────────────────────────────────────
PUSHOVER_TOKEN=
PUSHOVER_USER_KEY=

# ── hCaptcha / Rapid API ───────────────────────────────────────────────────────
HCAPTCHA_SECRET_KEY=
RAPID_API_KEY=
RAPID_API_HOST=

# ── Anubis bot protection ──────────────────────────────────────────────────────
# 64-character hex Ed25519 private key used to sign Anubis challenge cookies.
# Generate with: openssl rand -hex 32
ED25519_PRIVATE_KEY_HEX=