###############################################################################
# NetBox — all secrets & tunable configuration
#
# Docker Compose auto-loads this file (must be named ".env" and sit next to
# docker-compose.yml). Keep it OUT of version control:  echo ".env" >> .gitignore
###############################################################################

# ── Image version ───────────────────────────────────────────────────────────
# Keep the NetBox Docker image tag in sync with the compose file you deploy.
VERSION=v4.6-5.0.2

# ── Web exposure ────────────────────────────────────────────────────────────
# Host port that maps to NetBox's internal 8080. Change if 8000 is taken.
NETBOX_PORT=8000
# Comma-separated hostnames/IPs allowed to reach NetBox. Tighten in production,
# e.g. ALLOWED_HOSTS=netbox.example.com
ALLOWED_HOSTS=*

# ── Core secrets (generated — do not reuse elsewhere) ───────────────────────
SECRET_KEY=2HDStlQcTKmJyE_Wvf7ItgRmXet4sxdK_z9cw42_kShXnCjioRUltX2dTt0mAK2Z0yI
API_TOKEN_PEPPER_1=t5t-KOSYfm3gqPsYJzwiefcOsRmIwxNce7MMUDmXc-qWG96mNVyfvugE_dcH1J_wlaA

# ── PostgreSQL ──────────────────────────────────────────────────────────────
DB_NAME=netbox
DB_USER=netbox
DB_PASSWORD=6ihrE0FOUH3HVs4BSnEW8IT4

# ── Redis / Valkey (two separate instances need two separate passwords) ──────
REDIS_PASSWORD=jArceFdnYgevnBPyevdjMpna
REDIS_CACHE_PASSWORD=0T2NXivbsaulVrQrjI9otiQP

# ── Email / SMTP — PurelyMail ───────────────────────────────────────────────
# smtp.purelymail.com : 465 over SSL/TLS.
# EMAIL_USE_SSL and EMAIL_USE_TLS are mutually exclusive — do NOT set both true.
EMAIL_SERVER=smtp.purelymail.com
EMAIL_PORT=465
EMAIL_USE_SSL=true
EMAIL_USE_TLS=false
EMAIL_USERNAME=you@yourdomain.com
EMAIL_PASSWORD=CHANGE_ME_purelymail_password
EMAIL_FROM=you@yourdomain.com
EMAIL_TIMEOUT=10

# ── Initial superuser ───────────────────────────────────────────────────────
# Set SKIP_SUPERUSER=false to have the container create this account on first
# boot. Change the password/token before deploying, then set back to true.
SKIP_SUPERUSER=false
SUPERUSER_NAME=admin
SUPERUSER_EMAIL=admin@yourdomain.com
SUPERUSER_PASSWORD=CHANGE_ME_admin_password
SUPERUSER_API_TOKEN=0123456789abcdef0123456789abcdef01234567