main.yml

---
# general settings
homestack_output_path: "~"

# traefik
# renovate: image=traefik
homestack_traefik_version: v3.7.10
# renovate: image=ghcr.io/tarampampam/error-pages
homestack_error_pages_version: 3.8
homestack_error_pages_theme: app-down
# homestack_traefik_hostingde_api_key:  # must be set
homestack_traefik_hostingde_domain: example.com
homestack_traefik_base_domain: example.com
# homestack_traefik_base_path:  # must be set

# Nextcloud
homestack_nextcloud_active: true
homestack_nextcloud_uid: "1000"
homestack_nextcloud_gid: "1000"
homestack_nextcloud_user: "www-data"
homestack_nextcloud_group: "www-data"
# homestack_nextcloud_base_path: ""  # must be set
# homestack_nextcloud_db_path: ""  # must be set
# homestack_nextcloud_mysql_password: ""  # must be set
# homestack_nextcloud_mysql_root_password: ""  # must be set
homestack_nextcloud_admin_user: admin
# homestack_nextcloud_admin_password: ""  # must be set
# renovate: image=nextcloud
homestack_nextcloud_image_version: 32.0.13-apache
# homestack_nextcloud_smtp_host: ""  # must be set
# homestack_nextcloud_smtp_name: ""  # must be set
# homestack_nextcloud_smtp_password: ""  # must be set
homestack_nextcloud_base_domain: example.com
# homestack_nextcloud_mysql_path: ""  # must be set
# renovate: image=mariadb
homestack_nextcloud_mariadb_version: 12.3.2
# renovate: image=redis
homestack_nextcloud_redis_version: 8.10.0

# homestack_monitoring
homestack_monitoring_active: true
homestack_monitoring_base_domain: example.com
# renovate: image=prom/prometheus
homestack_monitoring_prometheus_image_version: v3.13.2
# homestack_monitoring_prometheus_base_path: ""  # must be set
# homestack_monitoring_prometheus_basic_auth_user: ""  # must be set
# homestack_monitoring_prometheus_basic_auth_password: ""  # must be set
# renovate: image=grafana/grafana-oss
homestack_monitoring_grafana_image_version: 13.0.2
# homestack_monitoring_grafana_admin_password: ""  # must be set
# homestack_monitoring_grafana_base_path: ""  # must be set

# homestack_ha
homestack_ha_active: true
homestack_ha_base_domain: example.com

# renovate: image=eclipse-mosquitto
homestack_ha_mosquitto_image_version: 2.0.22
# homestack_ha_mosquitto_base_path: ""  # must be set
homestack_ha_mosquitto_users: {}
# renovate: image=evcc/evcc
homestack_ha_evcc_image_version: 0.312.1
# homestack_ha_evcc_base_path: ""  # must be set
# homestack_ha_evcc_installation_id: ""  # must be set
homestack_ha_evcc_mqtt_user: evcc
homestack_ha_evcc_mqtt_password: password
homestack_ha_evcc_vw_user: mail@example.com
homestack_ha_evcc_vw_password: supersafe
homestack_ha_evcc_vw_vin: WVWZZZAAZJD000000
homestack_ha_evcc_ntfy_uri: https://ntfy.sh/abcdefghijklmnopqrstuvwxyz012345
homestack_ha_evcc_grid_costs: 0.30 # €/kWh
homestack_ha_evcc_feedin_revenue: 0.082 # €/kWh

# vwsfriend
homestack_vwsfriend_active: true
homestack_vwsfriend_base_domain: example.com

# renovate: image=tillsteinbach/vwsfriend
homestack_vwsfriend_image_version: 0.24.10
# homestack_vwsfriend_base_path: ""  # must be set
homestack_vwsfriend_username: admin
# homestack_vwsfriend_password: secret  # must be set
# homestack_vwsfriend_weconnect_user: ""  # must be set
# homestack_vwsfriend_weconnect_password: ""  # must be set
# homestack_vwsfriend_weconnect_spin: ""  # must be set
homestack_vwsfriend_weconnect_interval: 120
homestack_vwsfriend_postgres_image_version: 13.21
homestack_vwsfriend_db_user: vwsfriend
# homestack_vwsfriend_db_password: secret  # must be set
homestack_vwsfriend_db_name: vwsfriend
homestack_vwsfriend_additional_parameters: ""
homestack_vwsfriend_grafana_version: 0.24.7

homestack_backup: true
homestack_backup_script_path: /usr/local/bin

# git/forgejo
homestack_git_active: true
homestack_git_base_domain: example.com
homestack_git_ssh_port: 2222  # External SSH port shown in git clone URLs (Traefik routes to internal container port 2222)

# renovate: image=codeberg.org/forgejo/forgejo
homestack_git_forgejo_image_version: 11-rootless
# homestack_git_base_path: ""  # REQUIRED: Base directory for Forgejo data (repositories, config, logs). Example: /opt/forgejo

# Forgejo app.ini configuration
homestack_git_root_url: "https://git.{{ homestack_git_base_domain }}/"
homestack_git_ssh_domain: "git.{{ homestack_git_base_domain }}"

# Database (default to SQLite for simplicity)
homestack_git_db_type: sqlite3
homestack_git_db_path: /var/lib/gitea/data/forgejo.db
# For MySQL/PostgreSQL, set homestack_git_db_type to 'mysql' or 'postgres' and configure:
# homestack_git_db_host: "127.0.0.1:3306"  # Database host:port
# homestack_git_db_name: "forgejo"  # Database name
# homestack_git_db_user: "forgejo"  # Database user
# homestack_git_db_password: ""  # Database password

# Security (MUST be set by user)
# homestack_git_secret_key: ""  # REQUIRED: Encryption key for cookies and tokens. Generate with: openssl rand -hex 32
# homestack_git_internal_token: ""  # REQUIRED: Authentication token for internal API calls. Generate with: openssl rand -hex 105
# homestack_git_lfs_jwt_secret: ""  # Optional: JWT secret for LFS (defaults to secret_key if not set)
# homestack_git_oauth2_jwt_secret: ""  # Optional: JWT secret for OAuth2 (defaults to secret_key if not set)

# Service settings
homestack_git_disable_registration: true
homestack_git_require_signin_view: false

# Webhook settings
homestack_git_webhook_allowed_hosts: external  # Restrict webhooks to external hosts (not internal networks). Use '*' to allow all (not recommended)

# Mailer (optional)
homestack_git_mailer_enabled: false
# homestack_git_mailer_host: ""
homestack_git_mailer_port: 587  # SMTP port (587 for STARTTLS, 465 for SMTPS, 25 for plain)
# homestack_git_mailer_from: ""
# homestack_git_mailer_user: ""
# homestack_git_mailer_password: ""