feat(FN-002): complete Step 5 — Docker Compose and Portainer/Traefik Skeleton

deploy/portainer.env.example

@@ -0,0 +1,27 @@
+# Portainer stack environment variables (no secrets committed)
+# Copy and configure in Portainer UI or your secrets manager.
+
+APP_NAME=Headquarter
+ROOT_DOMAIN=example.com
+TOOL_DOMAIN=tools.example.com
+API_URL=https://api.example.com
+WEB_URL=https://example.com
+
+# Database
+POSTGRES_USER=headquarter
+POSTGRES_DB=headquarter
+POSTGRES_PASSWORD=
+
+# Authentik OIDC
+AUTHENTIK_ISSUER_URL=https://auth.example.com/application/o/headquarter/
+AUTHENTIK_CLIENT_ID=
+AUTHENTIK_CLIENT_SECRET=
+
+# Traefik
+TRAEFIK_NETWORK=traefik
+TRAEFIK_ENTRYPOINT=websecure
+TRAEFIK_CERT_RESOLVER=letsencrypt
+TOOL_SUBDOMAIN_PATTERN={tool}-{project}-{user}.tools.{ROOT_DOMAIN}
+
+# Secrets
+SECRET_ENCRYPTION_KEY=