# Sankofa/Phoenix Deployment Configuration for r630-01
# Copy this file to .env.r630-01 and update with your values

# Proxmox Configuration
PROXMOX_HOST=192.168.11.11
PROXMOX_NODE=r630-01
PROXMOX_STORAGE=thin1
PROXMOX_USER=root@pam

# Network Configuration
SANKOFA_VLAN=160
SANKOFA_SUBNET=10.160.0.0/22
SANKOFA_GATEWAY=10.160.0.1

# Service IPs (VLAN 160)
SANKOFA_POSTGRES_IP=10.160.0.13
SANKOFA_API_IP=10.160.0.10
SANKOFA_PORTAL_IP=10.160.0.11
SANKOFA_KEYCLOAK_IP=10.160.0.12

# VMIDs
VMID_SANKOFA_POSTGRES=7803
VMID_SANKOFA_API=7800
VMID_SANKOFA_PORTAL=7801
VMID_SANKOFA_KEYCLOAK=7802

# Database Configuration
DB_HOST=10.160.0.13
DB_PORT=5432
DB_NAME=sankofa
DB_USER=sankofa
DB_PASSWORD=CHANGE_THIS_PASSWORD_IN_PRODUCTION
POSTGRES_SUPERUSER_PASSWORD=CHANGE_THIS_PASSWORD_IN_PRODUCTION

# Keycloak Configuration
KEYCLOAK_URL=http://10.160.0.12:8080
KEYCLOAK_ADMIN_URL=http://10.160.0.12:8080/admin
KEYCLOAK_REALM=master
KEYCLOAK_ADMIN_USERNAME=admin
KEYCLOAK_ADMIN_PASSWORD=CHANGE_THIS_PASSWORD_IN_PRODUCTION
KEYCLOAK_CLIENT_ID_API=sankofa-api
KEYCLOAK_CLIENT_ID_PORTAL=portal-client
KEYCLOAK_CLIENT_SECRET_API=CHANGE_THIS_SECRET_IN_PRODUCTION
KEYCLOAK_CLIENT_SECRET_PORTAL=CHANGE_THIS_SECRET_IN_PRODUCTION
KEYCLOAK_MULTI_REALM=false

# API Configuration
API_HOST=10.160.0.10
API_PORT=4000
NEXT_PUBLIC_GRAPHQL_ENDPOINT=http://10.160.0.10:4000/graphql
NEXT_PUBLIC_GRAPHQL_WS_ENDPOINT=ws://10.160.0.10:4000/graphql-ws
JWT_SECRET=CHANGE_THIS_JWT_SECRET_IN_PRODUCTION
NODE_ENV=production

# Portal Configuration
PORTAL_HOST=10.160.0.11
PORTAL_PORT=3000
NEXT_PUBLIC_APP_URL=http://10.160.0.11:3000
NEXT_PUBLIC_CROSSPLANE_API=http://crossplane.sankofa.nexus
NEXT_PUBLIC_ARGOCD_URL=http://argocd.sankofa.nexus
NEXT_PUBLIC_GRAFANA_URL=http://grafana.sankofa.nexus
NEXT_PUBLIC_LOKI_URL=http://loki.sankofa.nexus:3100
NEXTAUTH_URL=http://10.160.0.11:3000
NEXTAUTH_SECRET=CHANGE_THIS_NEXTAUTH_SECRET_IN_PRODUCTION

# Multi-Tenancy
ENABLE_MULTI_TENANT=true
DEFAULT_TENANT_ID=

# Billing Configuration
BILLING_GRANULARITY=SECOND
BLOCKCHAIN_BILLING_ENABLED=false
BLOCKCHAIN_IDENTITY_ENABLED=false

# Blockchain (Optional)
BLOCKCHAIN_RPC_URL=
RESOURCE_PROVISIONING_CONTRACT_ADDRESS=

# Monitoring (Optional)
NEXT_PUBLIC_SENTRY_DSN=
SENTRY_AUTH_TOKEN=

# Analytics (Optional)
NEXT_PUBLIC_ANALYTICS_ID=
