# Dankclaw stack secrets and configuration.
# Copy to .env and fill real values. Never commit real secrets.

# SearXNG
SEARXNG_SECRET=changeme
SEARXNG_BASE_URL=http://search.dankclaw.local/

# Gluetun VPN (see https://github.com/qdm12/gluetun-wiki)
# Single-peer WireGuard model. Fill from your provider's WireGuard config.
VPN_SERVICE_PROVIDER=protonvpn
VPN_TYPE=wireguard
WIREGUARD_PRIVATE_KEY=changeme
WIREGUARD_ADDRESSES=0.0.0.0/32
WIREGUARD_PUBLIC_KEY=changeme
WIREGUARD_ENDPOINT_IP=0.0.0.0
WIREGUARD_ENDPOINT_PORT=51820
WIREGUARD_ALLOWED_IPS=0.0.0.0/0,::/0
WIREGUARD_PERSISTENT_KEEPALIVE_INTERVAL=25s

# Gitea database
GITEA_DB_PASSWORD=changeme

# Grafana admin
GRAFANA_ADMIN_USER=admin
GRAFANA_ADMIN_PASSWORD=changeme

# OpenWebUI -> llama.cpp on Dankserver (frank-default-large, port 7770)
# 2026-08-17 redo: the llama.cpp box moved from Dankclaw to Dankserver.
OPENAI_API_BASE_URL=http://192.168.0.235:7770/v1
OPENAI_API_KEY=not-needed