# copy to .env (configure.py --full generates it) — never commit the real one AUTHENTIK_SECRET_KEY= AUTHENTIK_PG_PASS= AUTHENTIK_TAG=2025.8 WATCH_HOST=watch.example.com MARIADB_ROOT_PASSWORD= BOT_DB_NAME=vanguardbot BOT_DB_USER=bot BOT_DB_PASSWORD= DISCORD_BOT_TOKEN= DISCORD_GUILD_ID= GIT_HOST=git.example.com GITEA_DB_PASSWORD= GITEA_RUNNER_TOKEN= BOT_HOST=bot.example.com LIVE_HOST=live.example.com MAIN_HOST=media.example.com LIVE_WEBHOOK_URL= BOT_REQUIRE_GROUP=bot-users LIVE_REQUIRE_GROUP= APEX_HOST= APEX_REDIRECT=