# cast cluster lab credentials (NOT production — shared intentionally for lab safety)
# Same values on cast01, cast02, cast03 unless noted.

[mariadb_root]
# Alpine default: unix socket auth as root, no password

[mariadb_app]
user=androidcast
password=cast-cluster-dev
host_write=cast01
host_read=cast01
port=3306
databases=androidcast_crashes,url_shortener

[mariadb_replication]
user=repl
password=cast-cluster-dev
allowed_from=10.7.16.%

[ssh]
user=ai
sudo=passwordless

[gitea_admin]
user=admin
password=cast-cluster-gitea-admin

[gitea_mirror]
# API token for mirror-gitea-ac-org.sh — stored on cast01 only:
#   /var/lib/gitea/.mirror-admin-token  (regenerate: see ac-docs/docs/SECRETS_AND_RECOVERY.md)

[secrets]
# Non-git lab secrets template: secrets.lab.env.example → copy to secrets.lab.env on NFS
# Recovery: ac-docs/docs/SECRETS_AND_RECOVERY.md