# Gitea instance URL (used for runner registration and API validation)
GITEA_URL=https://git.example.com

# Runner registration token from Gitea.
# Three levels are available:
#   Instance-level:  Site Administration → Actions → Runners → Create Registration Token
#   Org-level:       Organization → Settings → Actions → Runners → Create Registration Token
#   Repo-level:      Repository → Settings → Actions → Runners → Create Registration Token
GITEA_REGISTRATION_TOKEN=your-registration-token

# Gitea admin API token for optional post-install API checks (informational only).
# The integration test primarily verifies the runner by checking:
#   1. The .runner registration file exists and is valid
#   2. The container/service is running
# If set, API checks are performed as a bonus but do NOT affect pass/fail.
# Required scopes: read:user, read:repository, read:admin (or just "admin")
# Generate token at: Settings → Applications → Generate New Token
# CI_GITEA_API_TOKEN=your-admin-api-token
# Legacy CI_GITEA_TOKEN is also accepted.

# Integration test API retries (optional, default: 3).
# Number of times to retry API checks waiting for runner to appear.
# GITEA_INTEGRATION_RETRIES=3

# Default SSH user for remote hosts (optional, overrides --user)
# GITEA_RUNNER_USER=ubuntu

# Repository for grm trigger-workflow (optional, default: oblachno-oss/grm)
# GRM_REPO=oblachno-oss/grm

# Default SSH private key path (optional, overrides --key)
# GITEA_RUNNER_KEY=~/.ssh/id_ed25519

# Default runner labels for Gitea Actions (optional, overrides --labels)
# Format: <label>:<docker-image>[:<command>]
# Use an official Gitea runner image with Node.js, Python and Docker CLI.
# Avoid bare OS images like alpine:latest because actions/checkout@v4 needs Node.
# GITEA_RUNNER_LABELS=docker:docker://gitea/runner-images:ubuntu-latest

# UI language for GRM console messages (optional, default: en)
# Supported: en, bg, de, ru, zh, pl
# GRM_LANG=en

# Sudo password file for Ansible become operations (optional)
# When set, GRM reads the sudo password from this file instead of prompting.
# Priority: --become-password-file CLI flag > GRM_BECOME_PASSWORD_FILE > ANSIBLE_BECOME_PASSWORD_FILE
# GRM_BECOME_PASSWORD_FILE=~/.grm-sudo-pass
# ANSIBLE_BECOME_PASSWORD_FILE=~/.grm-sudo-pass

# Gitea PyPI registry username (for private package access)
# Used by PIP_INSTALL to configure PIP_EXTRA_INDEX_URL
CI_GITEA_USERNAME=your-gitea-username

# Role-based Gitea API tokens (devx 0.40.0+)
# DEVELOPER_GITEA_API_TOKEN is used by local `grm trigger-workflow` and `make create-pr`.
# CI_GITEA_API_TOKEN is used by CI workflows (and accepted as a fallback for local tools).
# REVIEWER_GITEA_API_TOKEN is used by CI to post APPROVE reviews; it must belong to a
# different user than the PR author.
# Legacy CI_GITEA_TOKEN and REVIEW_GITEA_TOKEN are accepted as fallbacks.
# DEVELOPER_GITEA_API_TOKEN=your-developer-token
# CI_GITEA_API_TOKEN=your-ci-token
# REVIEWER_GITEA_API_TOKEN=your-reviewer-token

# Vikunja API token (required for `make create-task` dev workflow)
# Generate at: Vikunja → Settings → API Tokens
# VIKUNJA_TOKEN=your-vikunja-api-token

# devx configuration (GRM-specific overrides)
# Task prefix for Vikunja task IDs
DEVX_TASK_PREFIX=GRM
# Vikunja project ID for GRM
DEVX_VIKUNJA_PROJECT_ID=6
# Version file path (relative to repo root)
DEVX_VERSION_FILE=src/grm/__init__.py