# Exposed HTTP port
HTTP_PORT=8080
DB_PORT=3306

# System time zone
TZ=Etc/UTC

# ID's
PUID=1000
PGID=1000

# Remote user auth (Caddy forward-auth via Authentik) — email-based lookup
AUTHENTICATION_GUARD=remote_user_guard
AUTHENTICATION_GUARD_HEADER=HTTP_X_AUTHENTIK_EMAIL