Files
stack/.env.example
kert 5aa043daea chore: drop deprecated Woodpecker references
Woodpecker CI is gone from the runtime; this purges the stale
mentions in env/dev scripts, dashboards, homepages, CSS comments,
and READMEs. Renames the SSO admin env var WOODPECKER_ADMIN to
GITEA_ADMIN to match where the admin actually lives.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-06 16:56:34 -04:00

64 lines
2.4 KiB
Plaintext

# ── Secrets (required) ──────────────────────────────
POSTGRES_PASSWORD=changeme
RUSTFS_ROOT_USER=admin
RUSTFS_ROOT_PASSWORD=changeme
RUSTFS_ACCESS_KEY=changeme
RUSTFS_SECRET_KEY=changeme
GITEA_S3_ACCESS_KEY=changeme
GITEA_S3_SECRET_KEY=changeme
GITEA_DB_PASSWORD=changeme
GITEA_TOKEN=changeme
# Nessie Data Lake
NESSIE_DB_PASSWORD=changeme
NESSIE_S3_ACCESS_KEY=changeme
NESSIE_S3_SECRET_KEY=changeme
# Polaris Iceberg Catalog
POLARIS_DB_PASSWORD=changeme
POLARIS_ROOT_SECRET=changeme
POLARIS_S3_ACCESS_KEY=changeme
POLARIS_S3_SECRET_KEY=changeme
# Zotero WebDAV (rclone → S3)
WEBDAV_S3_ACCESS_KEY=changeme
WEBDAV_S3_SECRET_KEY=changeme
WEBDAV_USER=zotero
WEBDAV_PASS=changeme
# Databricks (optional)
DATABRICKS_HOST=
DATABRICKS_TOKEN=
# ── Deployment ──────────────────────────────────────
# Base domain — all services get {name}.DOMAIN FQDNs.
# DNS must resolve *.DOMAIN to HOST_IP.
DOMAIN=fhirworx.io
HOST_IP=192.168.1.192
DOCKER_SOCK=/run/user/1000/docker.sock
# ── S3 / Object Storage ────────────────────────────
S3_ENDPOINT=http://rustfs:9000
S3_REGION=us-east-1
S3_WAREHOUSE=s3://lakehouse/
# ── Grafana ─────────────────────────────────────────
GF_ADMIN_PASSWORD=admin
# ── Gitea SSO ───────────────────────────────────────
GITEA_ADMIN=kert
# ── PRISMA / LLM ───────────────────────────────────
# Model-agnostic by design. Flip PRISMA_LLM_PROVIDER to "openai-compat"
# (with PRISMA_LLM_BASE_URL pointing at a vLLM/Ollama endpoint) to
# swap away from Anthropic — no code changes.
PRISMA_LLM_PROVIDER=anthropic
PRISMA_LLM_MODEL=claude-opus-4-6
PRISMA_LLM_BASE_URL=
ANTHROPIC_API_KEY=
OPENAI_API_KEY=
DIGITAL_OCEAN_PAT= # for `stack prisma vpn up` — droplet for fallback fetches
PRISMA_VPN_REGION=nyc3 # DO region slug (reachable from your ISP)
PRISMA_FETCH_PROXY= # populated by `stack prisma vpn up`; e.g. socks5://127.0.0.1:1080
UNPAYWALL_EMAIL=dev@fhirworx.io # required by Unpaywall API ToS