# Same-server bare-metal deployment
# Run this beside the main elektrine Docker stack.

HARAKA_DOMAIN=mail.example.com
LOCAL_DOMAINS=example.com,mail.example.com

# Shared from the main Elektrine deployment
PHOENIX_WEBHOOK_URL=http://elektrine_app:8080/api/haraka/inbound
PHOENIX_VERIFY_URL=http://elektrine_app:8080/api/haraka/verify-recipient
PHOENIX_DOMAINS_URL=http://elektrine_app:8080/api/haraka/domains

# Haraka -> Phoenix
PHOENIX_API_KEY=replace-with-haraka-to-phoenix-key

# Phoenix -> Haraka
HARAKA_HTTP_API_KEY=replace-with-phoenix-to-haraka-key

# Optional legacy shared key
# HARAKA_API_KEY=

# Match the main Elektrine Caddy volume name.
MAIN_CADDY_VOLUME=elektrine_caddy_data
MAIN_APP_NETWORK=docker_elektrine_network

# Haraka outbound API stays loopback-only on the same host.
HARAKA_HTTP_BIND_PORT=18080

# Optional trusted networks that may read /status, /healthz, and /metrics without X-API-Key.
OPS_ALLOWED_CIDRS=
METRICS_ALLOWED_CIDRS=

HARAKA_IMAGE=git.elektrine.com/elektrine/elektrine-haraka
HARAKA_IMAGE_TAG=latest
REDIS_URL=redis://redis:6379
ELEKTRINE_QUEUE_NAME=elektrine:inbound
ELEKTRINE_DLQ_NAME=elektrine:inbound:dlq
WEBHOOK_MAX_RETRIES=5
WEBHOOK_RETRY_BASE_MS=1000