.env now gitignored; .env.example is the committed template

Per standard Docker convention. The active `.env` is per-host
(contains the actual TSIG secret + any host-specific port/hostname
overrides). The `.env.example` template documents the expected
variables with stub values so a fresh checkout knows what to copy.

Also: docker-compose.yml now passes ACME_TSIG_SECRET to the coredns
container via plain `environment:` directive -- compose auto-reads
`.env` for substitution. No --env-file gymnastics needed at the
invocation level.
This commit is contained in:
Ryan Malloy 2026-05-21 12:37:23 -06:00
parent 3dd99fa81a
commit 162abedfdd
3 changed files with 22 additions and 0 deletions

4
.gitignore vendored
View file

@ -14,3 +14,7 @@ caddy-config/
# Local-only env overrides
.env.local
# Operational secrets / per-host overrides. Use .env.example as template.
.env
.env.local