secrets.example.env

# Copy this file to secrets.env and fill in your values.
# secrets.env is gitignored — never commit it.

# Hetzner Cloud API token (https://console.hetzner.cloud → Project → Security → API Tokens)
HCLOUD_TOKEN=your-hetzner-api-token

# Cloudflare API token with Zone:DNS:Edit permission (for Let's Encrypt DNS-01 challenge)
CLOUDFLARE_TOKEN=your-cloudflare-api-token

# Your domain — must be on Cloudflare DNS
DOMAIN=kratix.yourdomain.com

# Path to your SSH public key (default: ~/.ssh/id_rsa.pub)
SSH_PUBLIC_KEY_PATH=~/.ssh/id_rsa.pub

# Path to your SSH private key for connecting to the server (default: ~/.ssh/id_rsa)
SSH_PRIVATE_KEY_PATH=~/.ssh/id_rsa

# MinIO credentials (choose your own)
MINIO_ROOT_USER=minioadmin
MINIO_ROOT_PASSWORD=minioadmin

# Backstage PostgreSQL password
POSTGRES_PASSWORD=backstage