# shellcheck disable=SC2034
## Here you edit/update your settings that will be used for your docker-compose
## This will only work if you follow exactly the path structure in the Guide !!!
COMPOSE_PROJECT_NAME=

## Global Settings
# arr-stack configs and SQLite databases: keep this on local LXC disk.
DOCKERCONFDIR=/opt/arr-stack/appdata
# arr-stack downloads and media: this must be the NFS-backed Proxmox bind mount inside the LXC.
DOCKERSTORAGEDIR=/mnt/unas/arr_data
# Marker required at $DOCKERSTORAGEDIR/$ARR_DATA_MARKER before data-consuming services start.
ARR_DATA_MARKER=.arr-stack-storage
# Container service identity. Keep configurable; 1000:1000 is the recommended default.
PUID=1000
PGID=1000
# Default unprivileged LXC mapping: LXC uid/gid N appears on Proxmox as 100000+N.
LXC_IDMAP_BASE=100000
# <change to your timezone>
TZ=
# Dockerlogging and max size
DOCKERLOGGING_MAXFILE=3
DOCKERLOGGING_MAXSIZE=10m

# VPN
VPN_SERVICE_PROVIDER=airvpn
WIREGUARD_PRIVATE_KEY=
WIREGUARD_PRESHARED_KEY=
WIREGUARD_ADDRESSES=
FIREWALL_VPN_INPUT_PORTS=
SERVER_COUNTRIES=

# Home Automation
SLZB06_HOST=

# Database
POSTGRES_USER=
POSTGRES_PASSWORD=
POSTGRES_DB=
PGADMIN_EMAIL=
PGADMIN_PASSWORD=

SONARR_API_KEY=
RADARR_API_KEY=
SABNZBD_API_KEY=
QBITTORRENT_BASE_URL=http://gluetun:8080
QBITTORRENT_USERNAME=
QBITTORRENT_PASSWORD=

# Decluttarr queue cleanup
# Set to True first for dry-run validation, then False to enable cleanup actions.
DECLUTTARR_TEST_RUN=False
# Queue cleanup interval in minutes.
DECLUTTARR_TIMER=10
# Strike threshold before stalled downloads are removed.
DECLUTTARR_MAX_STRIKES=3
DECLUTTARR_LOG_LEVEL=INFO
DECLUTTARR_DETECT_DELETIONS=True

# Gramps config
TREE=
BASE_URL=
SECRET_KEY=
USER_DB_URI=

# Immich
# Photo upload location: Separate UNAS share (e.g., /mnt/unas/immich_data).
# Do not place this inside the arr-stack share if you want them isolated.
IMMICH_UPLOAD_LOCATION=/mnt/unas/immich_data
IMMICH_VERSION=release
IMMICH_DB_PASSWORD=
IMMICH_DB_USERNAME=immich
IMMICH_DB_DATABASE_NAME=immich
IMMICH_DB_HOSTNAME=immich-postgres
IMMICH_REDIS_HOSTNAME=immich-redis

OIDC_ISSUER=
OIDC_CLIENT_ID=
OIDC_CLIENT_SECRET=
OIDC_NAME=
OIDC_AUTO_REDIRECT=
OIDC_DISABLE_LOCAL_AUTH=

OIDC_GOOGLE_CLIENT_ID=
OIDC_GOOGLE_CLIENT_SECRET=

EMAIL_HOST=
EMAIL_PORT=
EMAIL_HOST_USER=
EMAIL_HOST_PASSWORD=
DEFAULT_FROM_EMAIL=

# Caddy reverse proxy template values
# Generate file with:
# ./substitute_env.sh docker-compose-files/caddy/Caddyfile_template docker-compose-files/caddy/Caddyfile .env
CADDY_TLS_EMAIL=admin@example.com
CADDY_BASE_DOMAIN=home.example.com
CADDY_HOST_IP=10.0.15.5
CLOUDFLARE_DNS_TOKEN=
CADDY_MEM_LIMIT=256m
# Prefixes used to build upstream IPs (for example, 10.0.10 + .24 => 10.0.10.24)
CADDY_LAN_PREFIX=10.0.1
CADDY_IOT_PREFIX=10.0.30
CADDY_OFFICE_PREFIX=10.0.10

# DNS stack (Technitium)
# Bind IP for DNS service (Technitium on Office VLAN 10)
DNS_BIND_IP=10.0.10.5
TECHNITIUM_WEB_BIND_IP=0.0.0.0
TECHNITIUM_WEB_PORT=5380
TECHNITIUM_WEB_CONTAINER_PORT=5380

# Technitium
TECHNITIUM_DNS_DOMAIN=home.arpa
TECHNITIUM_ADMIN_PASSWORD=
TECHNITIUM_RECURSION_MODE=UseSpecifiedNetworkACL
TECHNITIUM_RECURSION_ACL=127.0.0.1/32,::1/128,192.168.0.0/16,10.0.0.0/8,172.16.0.0/12,fc00::/7
TECHNITIUM_BLOCKING_TYPE=AnyAddress
TECHNITIUM_BLOCKLIST_URLS=https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
TECHNITIUM_ALLOW_BLOCKING_REPORT=false
TECHNITIUM_PREFER_IPV6=false
TECHNITIUM_MEM_LIMIT=512m
# Beszel Socket Proxy
BESZEL_SOCKET_PROXY_IMAGE_TAG=latest
BESZEL_SOCKET_PROXY_BIND_IP=127.0.0.1
BESZEL_SOCKET_PROXY_PORT=2375
BESZEL_SOCKET_PROXY_LOG_LEVEL=info
BESZEL_SOCKET_PROXY_MEM_LIMIT=64m

# Beszel Agent
# Required values come from Beszel Hub when adding a system.
BESZEL_AGENT_KEY=
BESZEL_AGENT_TOKEN=
BESZEL_AGENT_HUB_URL=
BESZEL_AGENT_LISTEN=45876
BESZEL_AGENT_IMAGE_TAG=latest
BESZEL_AGENT_MEM_LIMIT=128m