## Environment overrides for docker-compose

# Path to the host's Let's Encrypt directory that contains live/<domain>/ certs.
# This directory is bind-mounted into the Nginx container at /etc/letsencrypt.

# Linux hosts (default)
LETSENCRYPT_PATH=/etc/letsencrypt

# Windows (Docker Desktop with WSL Ubuntu). Uncomment and adjust distro name if different.
# LETSENCRYPT_PATH=//wsl$/Ubuntu/etc/letsencrypt

# Notes:
# - Ensure the following files exist under the path you set:
#   live/api.truckwash.dk/fullchain.pem
#   live/api.truckwash.dk/privkey.pem
#   live/cloud.truckwash.dk/fullchain.pem
#   live/cloud.truckwash.dk/privkey.pem
# - If you do not have certs for cloud.truckwash.dk locally, either comment out that
#   TLS server block in services/nginx/nginx.conf or place a temporary self-signed
#   cert/key pair at the expected path.

# Database target selection used by services/nginx/app/config.php
# Allowed values: live, debug
CONFIG_DB_TARGET=live

# Live DB credentials
CONFIG_DB_HOST=
CONFIG_DB_USER=
CONFIG_DB_PASSWORD=
CONFIG_DB_DATABASE=
CONFIG_DB_PORT=3306
CONFIG_DB_SSL_MODE=DISABLED

# Browser origins allowed to call the API. Path-like entries are normalized to origins by the PHP CORS policy.
CORS=https://truckwash.io,https://www.truckwash.io,https://api.truckwash.io,https://api.truckwash.io:4433,https://api-v2.truckwash.io,https://web.truckwash.dk,https://api.truckwash.dk,https://truckwash.dk,https://www.truckwash.dk,https://staging.truckwash.io,http://localhost,https://localhost,http://localhost:4433,https://localhost:4433,https://twdev.jeppeb.dk,http://localhost:5173

# Debug DB credentials (used when CONFIG_DB_TARGET=debug)
# Any blank debug value falls back to the live value above.
CONFIG_DB_DEBUG_HOST=mysql-debug
CONFIG_DB_DEBUG_USER=root
CONFIG_DB_DEBUG_PASSWORD=debug_root_password
CONFIG_DB_DEBUG_DATABASE=nnks_db_debug
CONFIG_DB_DEBUG_PORT=3306
CONFIG_DB_DEBUG_SSL_MODE=DISABLED

# e-conomic credentials
# Required: ECONOMIC_API_APP_ACCESS_GRANT and ECONOMIC_API_APP_SECRET_TOKEN
# Optional-but-recommended: ECONOMIC_API_APP_ACCESS_GRANT2 (falls back to primary grant when blank)
ECONOMIC_API_APP_ACCESS_GRANT=
ECONOMIC_API_APP_ACCESS_GRANT2=
ECONOMIC_API_APP_SECRET_TOKEN=

# Edge broker defaults for shell relay and gateway dispatch.
EDGE_BROKER_URL=http://edge-broker:4300
EDGE_PUBLIC_BROKER_URL=http://localhost/api/edge-broker
EDGE_AUTH_MODE=strict
EDGE_BROKER_SHARED_SECRET=

# Redis credentials
REDIS_CONFIG_HOST=redis
REDIS_CONFIG_DATABASE=0
REDIS_CONFIG_PASSWORD=
REDIS_CONFIG_PORT=6379
REDIS_CONFIG_USER=default

# Redis debug credentials
REDIS_CONFIG_DEBUG_HOST=redis
REDIS_CONFIG_DEBUG_DATABASE=0
REDIS_CONFIG_DEBUG_PASSWORD=
REDIS_CONFIG_DEBUG_PORT=6379
REDIS_CONFIG_DEBUG_USER=default