Real tokens live only in the host .env files (git-ignored): - /home/dank/serverAppConfigs/dankclaw/.env - /home/dank/serverAppConfigs/dankserver/.env Token is scoped to the franksdank.cloud zone (DNS read/write).
30 lines
711 B
Bash
30 lines
711 B
Bash
# Dankserver stack secrets and configuration.
|
|
# Copy to .env and fill real values. Never commit real secrets.
|
|
|
|
# RomM admin credentials (first boot)
|
|
ROMM_USERNAME=changeme
|
|
ROMM_PASSWORD=changeme
|
|
ROMM_AUTH_SECRET_KEY=changeme
|
|
|
|
# RomM database (MariaDB)
|
|
ROMM_DB_USER=romm
|
|
ROMM_DB_PASSWD=changeme
|
|
MARIADB_ROOT_PASSWORD=changeme
|
|
|
|
# RomM Redis
|
|
# (no password needed for local Redis)
|
|
|
|
# Copyparty
|
|
COPAY_PASS=changeme
|
|
|
|
# Jellyfin
|
|
JELLYFIN_PUBLISH_SERVER_URL=http://192.168.0.235:8096
|
|
|
|
# *arr Stack
|
|
ARR_TZ=America/New_York
|
|
|
|
# Porkbun API (franksdank.cloud zone). Caddy uses these for DNS-01
|
|
# Let's Encrypt wildcard cert issuance. Scope the token to this zone only.
|
|
PORKBUN_API_KEY=changeme
|
|
PORKBUN_API_SECRET=changeme
|