# Copy to platform.env (gitignored) and adjust. Sourced by bin/* as bash.
# Every file below must exist or the scripts refuse to run.
HOMELAB_SECRETS=$HOME/Code/github.com/nholtware/homelab/.secrets

FORGEJO_URL=https://git.lab.holtlabs.xyz
FORGEJO_OWNER=nholtware
FORGEJO_ADMIN_TOKEN_FILE=$HOMELAB_SECRETS/forgejo-admin-token   # repo create/delete, Actions secrets, git push
REGISTRY_PUSH_TOKEN_FILE=$HOMELAB_SECRETS/registry-push-token   # becomes REGISTRY_TOKEN; also lists/deletes packages
GITOPS_TOKEN_FILE=$HOMELAB_SECRETS/ci-bot-gitops-token          # becomes GITOPS_TOKEN (ci-bot)

GITOPS_DIR=$HOME/Code/forgejo.local/nholtware/gitops            # clean clone of nholtware/gitops on main
CODE_DIR=$HOME/Code/forgejo.local/nholtware                     # new service repos are cloned here
KUBECONFIG=$HOME/.kube/homelab.yaml

INGRESS_DOMAIN=lab.holtlabs.xyz                                 # services at https://<name>.$INGRESS_DOMAIN (renders __DOMAIN__)
INGRESS_IP=192.168.1.83                                         # health checks use curl --resolve, no DNS needed (TLS still verified)

# Public access (Plan 13): `new-service --public` adds https://<name>.$PUBLIC_DOMAIN via the Cloudflare Tunnel.
PUBLIC_DOMAIN=holtlabs.xyz
CF_ZONE_ID=f85fa3d7556872a69c4b24cc0c16a3a4                     # zone holtlabs.xyz
CF_TUNNEL_ID=a7032422-b137-456a-ba9b-424dc99b4b46               # tunnel platform-homelab; CNAME target <id>.cfargotunnel.com
CLOUDFLARE_TOKEN_FILE=$HOMELAB_SECRETS/cloudflare-dns-token     # Plan 11 token (Zone DNS edit)