# Nextcloud secrets + host-local binds — copy to .env (gitignored) next to
# docker-compose.yml and fill in real values. Never commit .env.

# LAN IP of the node Nextcloud lands on. The web port (8220) binds ONLY to
# this interface — never 0.0.0.0.
# TODO DECYZJA OSKARA: host! SOLARIA -> 192.168.31.70, PIHA -> 192.168.31.5.
LAN_BIND_IP=192.168.31.70

# Reverse proxy (npm@PIHA) as seen from THIS node's containers:
#  - Nextcloud on SOLARIA: npm connects over the LAN -> PIHA's LAN IP.
#  - Nextcloud on PIHA:    npm is a local container -> use the docker bridge
#    subnet instead (e.g. 172.16.0.0/12), verify with docker network inspect.
TRUSTED_PROXIES=192.168.31.5

# Postgres password for the nextcloud DB (app reads the same var).
POSTGRES_PASSWORD=change-me-very-strong

# Bootstrap admin — auto-provisioned on FIRST start only. Used to install and
# configure the user_oidc app (see README), day-to-day login is Forgejo OIDC.
NEXTCLOUD_ADMIN_USER=oskar
NEXTCLOUD_ADMIN_PASSWORD=change-me-bootstrap-only