{
  "_comment": "Copy this file to prebuild-config.json (gitignored) and fill it in. build.sh reads secrets/config from prebuild-config.json only — never from this template.",

  "app": {
    "repo_url": "https://git.abdelbaki.eu/The_miro/NewsAtlas.git",
    "branch": "main",
    "http_port": 8080
  },

  "secrets": {
    "_comment": "Written into /opt/newsatlas/.env inside the container (mode 600, root-only) and baked into the packaged template tarball. Anyone with a copy of that tarball has these values — see deploy/lxc/README.md before sharing/backing one up anywhere untrusted.",
    "owm_api_key": "",
    "acled_api_key": "",
    "acled_email": "",
    "opensky_username": "",
    "opensky_password": ""
  },

  "polling": {
    "rss_poll_minutes": 10,
    "market_poll_minutes": 15,
    "market_spike_threshold_pct": 1.5,
    "market_spike_lookback_hours": 6,
    "conflict_poll_minutes": 60,
    "flights_poll_seconds": 300,
    "article_window_hours": 72
  },

  "lxc": {
    "hostname": "newsatlas",
    "cores": 2,
    "memory_mb": 2048,
    "swap_mb": 512,
    "disk_gb": 8,
    "storage": "local-lvm",
    "template_storage": "local",
    "bridge": "vmbr0",
    "vlan": "",
    "ip": "dhcp",
    "gateway": "",
    "unprivileged": true,
    "start_on_boot": true,
    "root_password": "",
    "ssh_public_key_file": ""
  },

  "distros": {
    "_comment": "Which base-OS variants build.sh should build when run with --all. Each maps to a `pveam available` template name prefix; build.sh picks the newest matching version.",
    "debian": "debian-12-standard",
    "ubuntu": "ubuntu-24.04-standard",
    "alpine": "alpine-3.19-default"
  }
}