# Copy to .env next to docker-compose.yml and fill in. Never commit .env.
#
#   openssl rand -hex 32
BOARD_SECRET_KEY=

# From the Gitea OAuth2 application named `vienalatina-board`.
# Redirect URI: https://vienalatina.com/comunidad/auth/callback
# Leave "Confidential Client" TICKED — this app runs on the server and can keep
# a secret, unlike the Decap application, which must stay public.
BOARD_OAUTH_CLIENT_ID=
BOARD_OAUTH_CLIENT_SECRET=

# Gitea username of the first and only owner. Applied once, to an empty
# database, and ignored afterwards.
BOARD_OWNER=pablo

# Optional. A site-admin token lets admins create Gitea accounts from inside
# the members area. Without it, everything works except account creation, and
# admins add people who already have a Gitea login.
GITEA_ADMIN_TOKEN=

# Outgoing mail, for invitations and password resets. Without it an admin can
# still add members, but nobody can be invited and nobody can recover a
# password — which is the whole reason members could not get in before.
#
# These are the SMTP details of the hola@vienalatina.com mailbox. Port 465 means
# MAIL_SECURITY=ssl; port 587 means starttls. Using the wrong one of the pair is
# the usual reason a mailbox that works in a mail client fails here.
MAIL_HOST=
MAIL_PORT=587
MAIL_SECURITY=starttls
MAIL_USER=hola@vienalatina.com
MAIL_PASSWORD=
MAIL_FROM=Viena Latina <hola@vienalatina.com>