# Customer: Demo / Test Server (N100 Mini PC)
# Hardware: Intel N100, 16GB RAM, 128GB NVMe + 1TB HDD
# Network: Local + Cloudflare Tunnel for demo access

customer_id: demo-felhom
domain: demo-felhom.eu
gitea_repo: customers/demo-felhom-stacks
hardware: n100
notes: "Internal demo/test server for validating deployments"

# Apps to deploy on this node
apps:
  - actualbudget
  - docmost
  - filebrowser
  - homebox
  - immich
  - mealie
  - romm
  - stirling-pdf
  - vaultwarden

# Per-customer overrides (optional)
# Uncomment to pin versions or disable auto-updates
overrides: {}
  # immich_version: "v2.5.5"       # Pin Immich to specific version
  # auto_update: false              # Skip ALL version updates from catalog

# Portainer env vars to set (reference only — actual secrets go in Portainer!)
# These are documented here so you remember what each stack needs.
env_vars_reference:
  docmost:
    APP_SECRET: "generate with: openssl rand -hex 32"
    DB_PASSWORD: "generate secure password"
  immich:
    DB_PASSWORD: "generate secure password"
  romm:
    DB_PASSWORD: "generate secure password"
    MYSQL_ROOT_PASSWORD: "generate secure password"
    ROMM_AUTH_SECRET_KEY: "generate with: openssl rand -hex 32"
  vaultwarden:
    ADMIN_TOKEN: "generate with: openssl rand -hex 32"
    SIGNUPS_ALLOWED: "true (set to false after account creation)"

# Backup considerations
backup_notes:
  databases:
    - "docmost: PostgreSQL (docmost-postgres container)"
    - "immich: PostgreSQL (immich-postgres container)"
    - "romm: MariaDB (romm-db container)"
  file_volumes:
    - "actualbudget_data"
    - "docmost_storage"
    - "filebrowser_data"
    - "homebox_data"
    - "immich_upload (on HDD: /mnt/hdd_1/storage/immich)"
    - "mealie_data"
    - "romm_library"
    - "stirling_data"
    - "vaultwarden_data"