# Self-hosted LiveSync — Environment Variables
# Copy this file to .env and fill in your values.
# NEVER commit .env to version control.

# =============================================================================
# REQUIRED — CouchDB credentials
# =============================================================================

# Admin username for CouchDB
COUCHDB_USER=admin

# Admin password — use a strong random password (min 16 chars recommended)
COUCHDB_PASSWORD=change_me_use_a_strong_password

# Name of the database the Obsidian plugin will use
COUCHDB_DATABASE=obsidiannotes

# Host port CouchDB is exposed on (default: 5984)
# For tunnel-only deployments you can set this to 127.0.0.1:5984 to block external access
COUCHDB_PORT=5984

# =============================================================================
# PROFILE: caddy  (--profile caddy)
# =============================================================================

# Your public domain pointing to this server (A record)
# Example: couchdb.yourdomain.com
COUCHDB_DOMAIN=couchdb.yourdomain.com

# Email for Let's Encrypt TLS certificate notifications
ACME_EMAIL=you@yourdomain.com

# =============================================================================
# PROFILE: tailscale  (--profile tailscale)
# =============================================================================

# Tailscale authentication key for this container.
# OAuth clients require their own scopes and tag configuration; see:
# https://tailscale.com/docs/features/containers/docker/docker-params#ts_authkey
TS_AUTHKEY=tskey-auth-xxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

# Hostname this node will have on your tailnet (becomes <hostname>.<tailnet>.ts.net)
TS_HOSTNAME=livesync

# =============================================================================
# PROFILE: cloudflare  (--profile cloudflare)
# =============================================================================

# Tunnel token from Cloudflare Zero Trust dashboard
# Current setup guide: https://developers.cloudflare.com/tunnel/get-started/
# Copy the token from the "Install connector" step
CF_TUNNEL_TOKEN=eyJhIjoixxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx