# ─── Remote Host ──────────────────────────────────────────────────────────────
ssh_host = "prod-server.example.com"
ssh_user = "deploy"
# ssh_key_path is supplied at runtime by CI/CD from gopass — not stored here.

# ─── App Identity ─────────────────────────────────────────────────────────────
app_name    = "myapp"
environment = "prod" # named Docker volumes, data persists across container restarts

# ─── OpenResty: git_clone mode ────────────────────────────────────────────────
# The OpenResty Alpine image starts, installs git via apk, then clones the repo.
# Pin to a tag or full commit SHA — never use a branch name in prod.
# The repo must contain an 'openresty/' directory with a valid nginx.conf.
openresty_source_type = "git_clone"
openresty_git_repo    = "https://gitea.example.com/myorg/myapp-openresty.git"
openresty_git_ref     = "v1.4.2" # pinned tag — never 'main' in prod
# openresty_git_token is supplied at runtime by CI/CD from gopass — not stored here.
openresty_external_port = 80

# ─── PostgreSQL ───────────────────────────────────────────────────────────────
db_name = "myapp_prod"
db_user = "myapp"
# db_password is supplied at runtime by CI/CD from gopass — not stored here.

# ─── Images (optional overrides) ──────────────────────────────────────────────
# postgres_image = "postgres:16-alpine"
# redis_image    = "redis:7-alpine"