##
## Matrix Configuration Environment Variables (Tuwunel)
##
## IMPORTANT: server_name cannot be changed after the first start.
## Prefer a root domain (e.g. example.com) so users get @user:example.com handles.
## The server itself can be accessed at a subdomain (e.g. matrix.example.com) via
## a .well-known delegation.
##

# Server identity
TUWUNEL_SERVER_NAME=example.com

# Bind to localhost only - Traefik handles the public-facing TLS
TUWUNEL_ADDRESS=127.0.0.1
TUWUNEL_PORT=6167

# Database storage path (inside the container)
TUWUNEL_DATABASE_PATH=/var/lib/tuwunel/db

# Registration
# Set a token to restrict who can register.
TUWUNEL_ALLOW_REGISTRATION=true
TUWUNEL_REGISTRATION_TOKEN=changeme

# First user to register is automatically granted admin.
TUWUNEL_GRANT_ADMIN_TO_FIRST_USER=true

# Federation (disabled for a private home server)
TUWUNEL_ALLOW_FEDERATION=false

# Trusted servers for public key queries (used even without full federation)
TUWUNEL_TRUSTED_SERVERS=["matrix.org"]

# Tell Tuwunel to trust the X-Forwarded-For header set by Traefik
TUWUNEL_IP_SOURCE=rightmost_x_forwarded_for

# Log level
TUWUNEL_LOG=info

# Media Storage path and options
TUWUNEL_STORAGE_PROVIDER__MEDIA__LOCAL__BASE_PATH=/var/lib/tuwunel/media
TUWUNEL_STORAGE_PROVIDER__MEDIA__LOCAL__DELETE_EMPTY_DIRECTORIES=true
TUWUNEL_STORAGE_PROVIDER__MEDIA__LOCAL__STARTUP_CHECK=true

##
## First-run initialization (matrix-init)
## These variables are used once by matrix-init to create the admin user and
## discover the admin room. The generated credentials are stored in
## /var/lib/quadlets/matrix/tuwunel-backup.env (never edit that file manually).
##

# Username and password for the initial admin account.
MATRIX_INIT_ADMIN_USER=admin
MATRIX_INIT_ADMIN_PASSWORD=changeme

##
## Backup configuration
##

# Path where Tuwunel stores RocksDB online backups (inside the container).
# Each call to '!admin server backup-database' creates an incremental backup here.
TUWUNEL_DATABASE_BACKUP_PATH=/var/lib/tuwunel/backup

# Number of dated backup archives to keep on virtiofs (0 = keep all).
MATRIX_BACKUP_RETENTION=7

# NOTE: MATRIX_BACKUP_ACCESS_TOKEN and MATRIX_BACKUP_ROOM_ID are auto-generated
# by matrix-init into /var/lib/quadlets/matrix/tuwunel-backup.env. Do not set
# them here.