# /etc/restic/dbcreds.env on ana-docker — consumed by pre-backup.sh.
#
# Deploy to the host as:
#   sudo install -o root -g root -m 0600 dbcreds.env /etc/restic/dbcreds.env
#
# Never commit the real file — it carries production DB passwords. This
# template is the only thing tracked in the repo.

# --- Vaultwarden → external Postgres on PFI-Postgres (10.250.50.80) ---------
VW_PGHOST=10.250.50.80
VW_PGPORT=5432
VW_PGUSER=vaultwarden
VW_PGDB=vaultwarden
VW_PGPASS=replace-with-postgres-password

# --- Gitea → external Postgres on PFI-Postgres -------------------------------
# Not needed: pre-backup.sh uses `gitea dump` which reads DB creds from the
# container's own GITEA__database__* env vars. Listed here for awareness
# in case we switch to direct pg_dump later.
#
# GITEA_PGHOST=10.250.50.80
# GITEA_PGPORT=5432
# GITEA_PGUSER=gitea
# GITEA_PGDB=gitea
# GITEA_PGPASS=replace-with-postgres-password