# AdGuard Home — Anaheim. Copy to `.env` on ana-docker at
# /opt/docker/compose/adguard-ana/.env and chmod 600. Never commit the real file.

# Web UI / API port. compose.yaml defaults to 8053 if unset.
AG_WEB_PORT=8053

# Password for the `infra-ops` AdGuard login, used ONLY by the Homepage
# query/blocked/latency widget (homepage.widget.password in compose.yaml).
# One credential authenticates against all three fleet instances (ANA, ESH,
# NH3) — verified 2026-08-24. Fetch it from the vault rather than copying it
# between boxes:
#
#   secret get nh3-dev/adguard-infra-ops-password
#
# (`secret` is services/secrets-broker/secret on nh3-dev.)
ADGUARD_WIDGET_PASSWORD=