# traefik Stack — Secrets Reference
# Source: traefik.env
#
# Add SECRET values to Woodpecker at:
#   https://woodpecker.bryanmail.net
#   homelab/compose-files → Settings → Secrets
#
# ⚠️  HIGH RISK: Traefik is the entry point for all homelab services.
#     If this stack fails, nothing is reachable from outside.
#     Migrate carefully. The Keepalived VIP (192.168.4.30) depends on this stack.

# ── SECRETS (add to Woodpecker) ───────────────────────────────────────────────

# Woodpecker secret name:  traefik_keepalived_password
# Used for:               Keepalived VRRP authentication password
#                         Must match across all 3 nodes (docker-1, docker-2, docker-3)
# Env var in .env:        KEEPALIVED_PASSWORD
traefik_keepalived_password=

# ── NON-SECRETS (safe in compose file or .env) ────────────────────────────────

# KEEPALIVED_UNICAST_PEERS     Python2BASH list of peer IPs
# KEEPALIVED_VIRTUAL_IPS       Python2BASH list of VIP addresses (192.168.4.30)
# ACME_EMAIL                   Let's Encrypt certificate email
# TRUSTED_IPS                  Trusted proxy CIDR ranges
# TRAEFIK_HOST                 Traefik dashboard hostname
# SPEEDTEST_HOST               Speedtest Traefik hostname
# WHOAMI_HOST                  Whoami Traefik hostname

# ── Woodpecker provision-secrets case entry ───────────────────────────────────
#
#   traefik)
#     create_or_update_secret "traefik_keepalived_password" "$TRAEFIK_KEEPALIVED_PASSWORD"
#     ;;