secrets.env.example

# Copy to secrets.env (gitignored, never committed) and adjust. Kept
# separate from .env so credential-shaped values aren't intermixed with
# ordinary configuration -- easier to keep out of logs/backups/screen
# shares, and it's obvious at a glance which file is safe to paste into a
# support thread and which isn't.
#
# docker-compose.yml loads this via `env_file:` on the db and api
# services. Nothing here is compose-file-interpolated (no ${VAR} lookups
# from this file), it's injected directly as container environment
# variables.

# Postgres password. POSTGRES_USER/POSTGRES_DB themselves aren't secret
# and live in .env instead.
POSTGRES_PASSWORD=change-me

# "meshdev" / "large4cats" are the Meshtastic project's standard public
# read/write MQTT credentials -- used by mqtt.meshtastic.org and most
# compatible brokers, including mqtt.lucifernet.com. Not actually a
# secret, but credential-shaped values belong in this file on principle,
# and you may want to swap in a real login for a private broker.
MESHTASTIC_MQTT_USERNAME=meshdev
MESHTASTIC_MQTT_PASSWORD=large4cats