# Gitea — HTTPS via nginx-proxy at https://git.wbd-rd.nl
GITEA_ROOT_URL=https://git.wbd-rd.nl
GITEA_DOMAIN=git.wbd-rd.nl

# Postgres backend (DB+role auto-provisioned by sql/config/init.d/01-databases.sh)
GITEA_DB_HOST=sql:5432
GITEA_DB_NAME=gitea
GITEA_DB_USER=gitea
GITEA_DB_PASSWORD=

# OIDC via Keycloak (auth source added via CLI post-deploy — see README)
GITEA_OAUTH_CLIENT_ID=gitea
GITEA_OAUTH_CLIENT_SECRET=
GITEA_OAUTH_DISCOVERY_URL=https://auth.wbd-rd.nl/realms/wbd/.well-known/openid-configuration

# Mail (gitea reads SMTP_ADDR=postfix on the app network)
GITEA_MAIL_FROM=gitea@wbd-rd.nl