.env.sample

# Gate-WireGuard environment variables
# Copy to .env and fill in your values

# --- Required for all environments ---

# Google OAuth credentials (https://console.cloud.google.com/apis/credentials)
GOOGLE_CLIENT_ID="your-client-id.apps.googleusercontent.com"
GOOGLE_CLIENT_SECRET="your-client-secret"

# Restrict sign-in to specific Google Workspace domains (comma-separated, or blank for any)
# HOSTED_DOMAINS="example.com,other.com"

# Email of the first admin user (auto-activated and granted admin on first login)
ADMIN_USER_EMAIL=""

# Redis connection
GATE_REDIS_HOST="127.0.0.1"
GATE_REDIS_PORT=6379          # Default: 6379 (docker-compose maps to 16379 for dev)

# DNS zone for Gate DNS records
GATE_DNS_ZONE="example.com"

# --- Production only (set automatically by deploy/install_gate.sh) ---

# RAILS_ENV=production
# SECRET_KEY_BASE=generate-with-openssl-rand-hex-64
# GATE_DATABASE=gate_wireguard_production
# GATE_DATABASE_USER=gate_wireguard
# GATE_DATABASE_PASSWORD=your-db-password