ANSIBLE_PRIVATE_KEY_FILE=

TF_VAR_region=ca-central
TF_VAR_instance_type=g6-nanode-1
TF_VAR_image=linode/debian13
TF_VAR_group=
TF_VAR_ssh_port=22
TF_VAR_timezone=America/Toronto
TF_VAR_add_cloudflare_ips=false

TF_VAR_enable_cloudflare_dns=false
TF_VAR_enable_services_wildcard=true

TF_VAR_tf_state_bucket=
TF_VAR_tf_state_region=us-east-1

AUTHELIA_SMTP_ADDRESS=
AUTHELIA_SMTP_SENDER=
AUTHELIA_SMTP_IDENTIFIER=
AUTHELIA_SMTP_STARTUP_CHECK_ADDRESS=
AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK=true
AUTHELIA_NOTIFIER_TYPE=smtp

INFRA_BACKUP_ONCALENDAR=daily
RESTIC_KEEP_WEEKLY=4

# Vault-managed variables (defined in vault.yml)
# AUTHELIA_SMTP_USERNAME=
# AUTHELIA_SMTP_PASSWORD=
# RESTIC_KEEP_DAILY=7
# RESTIC_KEEP_MONTHLY=6
# VAULT_DEPLOY_TOKEN=

# Optional: Postmark SMTP Configuration
# POSTFIX_RELAYHOST=smtp.postmarkapp.com
# POSTFIX_RELAYHOST_PORT=2525
# POSTFIX_RELAYHOST_USERNAME=your-postmark-server-token
# POSTFIX_RELAYHOST_PASSWORD=your-postmark-server-token
# POSTFIX_SMTP_TLS_SECURITY_LEVEL=may
# POSTFIX_ALLOWED_SENDER_DOMAINS=yourdomain.com
# POSTFIX_ALLOW_EMPTY_SENDER_DOMAINS=true