DJANGO_DEBUG_FALSE=1
DJANGO_SECRET_KEY={{ secret_key.content | b64decode }}
DJANGO_ALLOWED_HOST={{ django_allowed_host }}
DJANGO_SUPERUSER_EMAIL={{ django_superuser_email }}
DJANGO_SUPERUSER_PASSWORD={{ django_superuser_password }}
DATABASE_URL=postgresql://gamearray:{{ postgres_password }}@gamearray_postgres/gamearray
MAILGUN_API_KEY={{ mailgun_api_key }}
STRIPE_PUBLISHABLE_KEY={{ stripe_publishable_key }}
STRIPE_SECRET_KEY={{ stripe_secret_key }}
CELERY_BROKER_URL=redis://gamearray_redis:6379/0
REDIS_URL=redis://gamearray_redis:6379/1
PYSWISS_URL=https://charts.earthmanrpg.me
# coturn / WebRTC voice — only COTURN_SHARED_SECRET is sensitive (it signs the
# TURN HMAC creds + must equal the coturn droplet's static-auth-secret). Host +
# realm are public. coturn_secret comes from the vault (share it across the app
# + coturn host groups, e.g. group_vars/all/vault.yaml, so both plays match).
COTURN_SHARED_SECRET={{ coturn_secret }}
COTURN_TURN_HOST=turn.earthmanrpg.me
COTURN_REALM=earthmanrpg.me