.env.example

# Rsync.net connection settings
RSYNC_HOST=xxxxxx.rsync.net
RSYNC_USER=xxxxxx

# SSH private key (base64 encoded - single line for Portainer compatibility)
# To encode your key: cat ~/.ssh/your_key | base64 -w0
# On Windows PowerShell: [Convert]::ToBase64String([IO.File]::ReadAllBytes("path\to\key"))
SSH_PRIVATE_KEY_B64=your-base64-encoded-ssh-key-here

# S3 Gateway credentials (used by rclone and browser)
S3_ACCESS_KEY=your-access-key-here
S3_SECRET_KEY=your-secret-key-here

# S3 domain for Caddy HTTPS (used in docker-compose.cloudflare.yml)
S3_DOMAIN=s3.yourdomain.com

# Public S3 endpoint URL for display in browser (e.g., https://s3.yourdomain.com:8443)
S3_PUBLIC_ENDPOINT=https://s3.yourdomain.com:8443

# Cloudflare API token for DNS challenge (Zone:DNS:Edit permission)
# Create at: https://dash.cloudflare.com/profile/api-tokens
CLOUDFLARE_API_TOKEN=your-cloudflare-api-token

# Browser authentication mode: "basic", "cloudflare", or "none"
# - basic: HTTP Basic Auth (use AUTH_USERNAME/AUTH_PASSWORD)
# - cloudflare: Trust Cloudflare Access headers (configure Access Application first)
# - none: No authentication (not recommended for public access)
AUTH_MODE=basic

# Browser authentication (only used when AUTH_MODE=basic)
AUTH_USERNAME=admin
AUTH_PASSWORD=changeme

# Logging
LOG_LEVEL=INFO