# Copy to .env and fill in real values

# Single base domain for the whole stack; every service is a subdomain of this.
# DNS is handled OUTSIDE this repo — point ${BASE_DOMAIN} and every subdomain
# (auth. pack. avatar. status. distribution. www.) at the host running nginx.
BASE_DOMAIN=ulicraft.net

RCON_PASSWORD=change-me-to-something-random

# Registration mode for self-hosted accounts (Drasl) + landing register form.
#   invite = closed; guests need an admin-minted invite code (recommended on a
#            public, internet-present host). Admin mints via POST /drasl/api/v2/invites.
#   open   = anyone can self-register with username+password (set [RateLimit]!).
# Consumed by BOTH render-config.sh (-> Drasl RegistrationNewPlayer.RequireInvite)
# and the landing build (-> show/hide the invite-code field). Default: invite.
REGISTRATION_MODE=invite

# caddy host-published port. The host's own nginx terminates TLS and
# reverse-proxies to caddy by Host header (nginx/ulicraft-caddy.conf.tmpl), so
# bind caddy to a high localhost-only port — only nginx should reach it.
CADDY_HTTP_PORT=8880
CADDY_HTTP_BIND=127.0.0.1

# distribution.${BASE_DOMAIN} static vhost. Absolute host path to the built
# static site — it lives in ANOTHER repo. Bind-mounted read-only into caddy.
DISTRIBUTION_WEB_ROOT=/home/oier/projects/mc-mods/ulicraft-group/ulicraft-distribution/dist

# Only needed if using CurseForge-exclusive mods:
# CF_API_KEY=your-curseforge-api-key

# ── Let's Encrypt via OVH DNS-01 (tooling/issue-letsencrypt.sh) ───────
# Only needed to issue real TLS certs. DNS-01 needs no inbound ports.
LE_EMAIL=you@example.com
# space-separated subdomains; apex ${BASE_DOMAIN} is always included
LE_SUBDOMAINS=auth pack distribution www avatar status
# OVH API creds (DNS zone write). Create at https://eu.api.ovh.com/createToken/
# OVH_CK can be blank on first run — acme.sh prints an auth URL, then paste it.
OVH_END_POINT=ovh-eu
OVH_AK=
OVH_AS=
OVH_CK=
# LE_STAGING=1   # use the untrusted staging CA for dry runs
