# =============================================================================
# .env.example — Safe template. Copy to .env and fill in real values.
# DO NOT put real passwords here. This file IS committed to git.
# =============================================================================

# ── Fake/local Synology (used by the local Docker simulation) ─────────────────
SYNOLOGY_PASS=change-me-local
RC_PASSWORD=change-me-rc

# ── Agent ↔ Collector shared secret ──────────────────────────────────────────
# Generate with: openssl rand -hex 24
AGENT_TOKEN=change-me-generate-with-openssl

# ── Real NAS credentials (used by the collector for server-side verification) ─
# These should be READ-ONLY credentials if possible. Rotate from production.
REAL_SYNOLOGY_HOST=your-nas-hostname.example.com
REAL_SYNOLOGY_PORT=22
REAL_SYNOLOGY_USER=your-sftp-user
REAL_SYNOLOGY_PASS=your-sftp-password

# ── Site identity ─────────────────────────────────────────────────────────────
ORGANISATION=ORG
SITENAME=GCBOT