From 3ec0b954966be1a573fa19648b2c8b11814ae8eb Mon Sep 17 00:00:00 2001
From: smueller <smueller+vm@hexahost.de>
Date: Tue, 23 Jun 2026 09:37:32 +0200
Subject: [PATCH] Add .env.example (customer config template)

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .env.example | 53 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 53 insertions(+)
 create mode 100644 .env.example

diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..3993bbc
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,53 @@
+# =============================================================================
+# Eikona AutoInstall – Kunden-Installation (nur Docker Images, kein Quellcode)
+# =============================================================================
+
+# Registry-Login (vom Hersteller erhalten):
+#   echo "$REGISTRY_TOKEN" | docker login git.hexahost.dev -u KUNDE --password-stdin
+
+# Image-Version (vom Hersteller mitgeteilt, z. B. 1.0.0)
+IMAGE_TAG=1.0.3
+
+# --- Allgemein ---
+APP_ENV=production
+
+# --- PostgreSQL ---
+POSTGRES_PASSWORD=CHANGE_ME
+DATABASE_URL=postgresql+psycopg://eikona:CHANGE_ME@127.0.0.1:5432/eikona
+
+WORKER_MAX_PARALLEL_DEPLOYMENTS=4
+
+# --- Auth ---
+AUTH_JWT_SECRET=CHANGE_ME_GENERATE_LONG_RANDOM_SECRET
+AUTH_BOOTSTRAP_ADMIN_USERNAME=admin
+AUTH_BOOTSTRAP_ADMIN_PASSWORD=CHANGE_ME
+
+PROXMOX_DEFAULT_ROOT_PASSWORD=CHANGE_ME
+
+# Erreichbare IP/URL des Deployment-Servers (kein localhost!)
+DEPLOY_SERVER_URL=http://192.168.1.100:8000
+
+# --- ISO ---
+ISO_PVE_VERSION=9.2-1
+ISO_PVE_DOWNLOAD_URL=
+
+# --- CORS (UI-URL anpassen) ---
+CORS_ORIGINS=["http://192.168.1.100"]
+
+# --- Cleanup ---
+CLEANUP_ENABLED=true
+CLEANUP_INTERVAL_HOURS=24
+CLEANUP_WORK_RETENTION_HOURS=24
+CLEANUP_ARTIFACT_RETENTION_DAYS=7
+CLEANUP_KEEP_LATEST_ARTIFACTS=2
+CLEANUP_REMOVE_SOURCE_CACHE=false
+
+# --- Lizenz (LicenseGate – Key vom Hersteller) ---
+LICENSE_ENFORCE=true
+LICENSE_KEY=CHANGE_ME
+LICENSEGATE_API_URL=https://license-api.hexaho.st
+LICENSEGATE_USER_ID=1
+LICENSE_SCOPE=eikona-install
+LICENSE_USE_CHALLENGE=true
+LICENSE_CACHE_PATH=/data/license/verification-cache.json
+LICENSE_CACHE_GRACE_HOURS=72