.env.example

# Timezone
TZ=Europe/Warsaw

# Container user/group IDs
PUID=1000
PGID=1000

# Domain for Traefik routing (*.example.com)
DOMAIN_NAME=example.com

# Tailscale IP (bind Traefik here, not 0.0.0.0)
TAILSCALE_IP=100.x.x.x

# Cloudflare (ACME DNS challenge for Let's Encrypt)
CF_DNS_API_TOKEN=your_cloudflare_dns_api_token
CF_API_EMAIL=your@email.com
ACME_EMAIL=your@email.com

# ProtonVPN WireGuard — main tunnel (NL/CH, P2P)
WG_PRIVATE_KEY=your_wireguard_private_key
WG_PUBLIC_KEY=your_wireguard_public_key
WIREGUARD_ADDRESSES=10.2.0.2/32

# ProtonVPN credentials (OpenVPN fallback)
PROTONVPN_USERNAME=your_protonvpn_username
PROTONVPN_PASSWORD=your_protonvpn_password

# Volume paths (adjust for your system — defaults are Unraid)
DATA_DIR=/mnt/user/appdata
DOWNLOADS_DIR=/mnt/user/media/downloads/qbittorrent
MEDIA_TV_DIR=/mnt/user/media/tv
MEDIA_MOVIES_DIR=/mnt/user/media/movies

# qBittorrent
QB_USERNAME=admin
QB_PASSWORD=change_me
BT_PORT=51413