---
# Main domain (apps + landing page)
domain: home.friessn.de

# Gitea on a subdomain — cleaner than a subpath, required for container registry
gitea_domain: git.friessn.de
gitea_data_dir: /opt/gitea
gitea_http_port: 3000            # internal port, nginx proxies HTTPS → here
gitea_admin_user: nico
gitea_admin_password: CHANGE_ME  # replace — set via ansible-vault in production
gitea_admin_email: nico.friess@googlemail.com

# Container registry — Gitea's built-in OCI registry, same host as Gitea
# Images: git.friessn.de/nico/homekeeper-api:latest
registry_host: "{{ gitea_domain }}"
registry_user: "{{ gitea_admin_user }}"
registry_token: CHANGE_ME        # Gitea API token with package:write — set after first Gitea start

# Homekeeper app
homekeeper_data_dir: /opt/homekeeper
db_name: homestead
db_user: homestead
db_password: CHANGE_ME           # replace — set via ansible-vault in production
api_user: homestead
api_pass: CHANGE_ME              # replace
initial_users: "nico:CHANGE_ME"  # user:password pairs for API auth

# Auto-update timer interval (OnCalendar syntax)
autoupdate_schedule: "*:*:0/10"  # every 10 seconds