deploy backup-bot-two to mango

2026-02-19 20:19:19 -08:00
28 changed files with 64 additions and 347 deletions
@@ -1,6 +1 @@
-*~
+.*~
 abra/catalogue
 abra/recipes/*
 !abra/recipes/rtm-astro-recipe
 !abra/recipes/mapbattle-recipe
 abra/logs
@@ -1,6 +0,0 @@
 [submodule "abra/recipes/rtm-astro-recipe"]
 	path = abra/recipes/rtm-astro-recipe
 	url = https://git.coopcloud.tech/RTM/rtm-astro-recipe
 [submodule "abra/recipes/mapbattle-recipe"]
 	path = abra/recipes/mapbattle-recipe
 	url = ssh://git@git.coopcloud.tech:2222/RTM/mapbattle-recipe.git
@@ -1,33 +0,0 @@
 ## Setup
 Members of RTM: check out the "RTM Reference" collective on our nextcloud for information on how to set up tailscale, ssh access, and user accounts on our servers. Without this, you won't be able to do operations.
 Once you have network access, install abra. Read the "Install" and "Quick start"/"New operators tutorial" sections of https://docs.coopcloud.tech/abra/, which will guide you through `wget`ting abra.
 Then, run:
 ```
 $ git clone --recurse-submodules https://git.coopcloud.tech/RTM/rtm-config.git
 $ cd rtm-config
 $ abra server add laylotta.resisttechmonopolies.online
 $ abra server add mango.resisttechmonmopolies.online
 $ abra server add sootie.resisttechmonopolies.online
 ```
 If you skipped the `--recurse-submodules` flag, you can still do `git submodule update --init` later to get the rtm-astro-recipe recipe.
 ## Usage
 Once you've got this repo cloned and abra installed, you can run abra commands. To test:
 ```
 $ abra app logs resisttechmonopolies.online
 ```
 Should give a list of logs for our website! Other abra commands will work here.
 From here, use `abra` to make changes (and reach out to a member of our infra/member-services working group for a tutorial if you would like!). Then, contribute your git changes back to this repository so everyone else sees what you've done and doesn't clobber your changes.
 ## Dev environment
 Sootie is our dev server. If you would like to experiment with changes and fuck around there, use sootie! The implication here is that sootie has a greater chance of having uncommitted changes in its environment than other servers, and that these changes are safe to clobber over.
@@ -1,29 +0,0 @@
 TYPE=headscale:00a12a21
 DOMAIN=headscale.laylotta.resisttechmonopolies.online
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.headscale.laylotta.resisttechmonopolies.online`'
 LETS_ENCRYPT_ENV=production
 COMPOSE_FILE="compose.yml"
 # Defines the base domain to create the hostnames for MagicDNS.
 BASE_DOMAIN=rtm.online
 # set this to true to enable using the built-in DERP rather than tailscale's
 ENABLE_DERP=true
 # enable oidc
 OIDC_ENABLED=1
 OIDC_ISSUER=https://auth.resisttechmonopolies.online/application/o/headscale/
 SECRET_OIDC_CLIENT_KEY_VERSION=v1
 COMPOSE_FILE="$COMPOSE_FILE:compose.oidc.yml"
 # See https://git.coopcloud.tech/coop-cloud/backup-bot-two
 ENABLE_BACKUPS=true
 ## allow cron updater
 COMPOSE_FILE="$COMPOSE_FILE:compose.dns.yml"
 DNS_REPO=RTM/sootie-dynamic-dns
@@ -1,6 +0,0 @@
 TYPE=listmonk:5.1.0+v6.1.0
 DOMAIN=listmonk.resisttechmonopolies.online
 LETS_ENCRYPT_ENV=production
 SECRET_DB_PASSWORD_VERSION=v1
@@ -1,84 +0,0 @@
 TYPE=monitoring-ng:23b13cb8
 LETS_ENCRYPT_ENV=production
 COMPOSE_FILE=compose.yml
 DOMAIN=m.laylotta.resisttechmonopolies.online
 TIMEOUT=120
 ENABLE_BACKUPS=true
 ## Enable this secret for Promtail / Prometheus
 SECRET_BASIC_AUTH_VERSION=v1
 ## Promtail (Gathering Logs)
 COMPOSE_FILE="$COMPOSE_FILE:compose.promtail.yml"
 LOKI_PUSH_URL=https://loki.${DOMAIN}/loki/api/v1/push
 ## Expose node and cadvisor ports instead of traefik
 COMPOSE_FILE="$COMPOSE_FILE:compose.expose-ports.yml"
 # Monitoring Server
 #
 ## Prometheus
 COMPOSE_FILE="$COMPOSE_FILE:compose.prometheus.yml"
 PROMETHEUS_RETENTION_TIME=1y
 ## Prometheus Pushgateway
 COMPOSE_FILE="$COMPOSE_FILE:compose.pushgateway.yml"
 ## Loki
 # Loki Server
 COMPOSE_FILE="$COMPOSE_FILE:compose.loki.yml"
 # Set to 0 to disable retention
 LOKI_RETENTION_PERIOD=744h
 LOKI_STORAGE_FILESYSTEM=1
 ## S3 Storage
 # LOKI_STORAGE_S3=1
 # LOKI_AWS_ENDPOINT=https://minio.autonomic.zone
 # LOKI_AWS_REGION=eu-west-1
 # LOKI_ACCESS_KEY_ID=bush-debrief-approval-robust-scraggly-molecule
 # LOKI_BUCKET_NAMES=loki
 # SECRET_LOKI_AWS_SECRET_ACCESS_KEY_VERSION=v1
 #
 ## Grafana
 #
 # COMPOSE_FILE="$COMPOSE_FILE:compose.grafana.yml"
 # GF_SERVER_ROOT_URL=https://monitoring.example.com
 # SECRET_GRAFANA_ADMIN_PASSWORD_VERSION=v1
 ## Seperate domain for Grafana
 #GRAFANA_DOMAIN=grafana.example.com
 #
 ## Single-Sign-On with OIDC
 # OIDC_ENABLED=1
 # SECRET_GRAFANA_OIDC_CLIENT_SECRET_VERSION=v1
 # OIDC_CLIENT_ID=grafana
 # OIDC_AUTH_URL="https://authentik.example.com/application/o/authorize/"
 # OIDC_API_URL="https://authentik.example.com/application/o/userinfo/"
 # OIDC_TOKEN_URL="https://authentik.example.com/application/o/token/"
 #
 ## Additional grafana settings (unlikely to require editing)
 # GF_SECURITY_ALLOW_EMBEDDING=1
 # GF_INSTALL_PLUGINS=grafana-piechart-panel
 #
 ## grafana SMTP configuration (optional)
 # GF_SMTP_HOST=changeme
 # GF_SMTP_USER=changme
 # GF_SMTP_ENABLED=true
 # GF_SMTP_FROM_ADDRESS=grafana@example.com
 # GF_SMTP_SKIP_VERIFY=false
 # SECRET_GRAFANA_SMTP_PASSWORD_VERSION=v1
 #
 ## Grafana Matrix Contact Point (optional)
 #COMPOSE_FILE="$COMPOSE_FILE:compose.matrix-alertmanager-receiver.yml"
 #SECRET_MATRIX_ACCESS_TOKEN_VERSION=v1
 #GF_MATRIX_USER_ID="<user-id>"
 #GF_MATRIX_ROOM_ID="<room-id>"
 #GF_MATRIX_HOMESERVER_URL="<homeserver-url>"
 # ALerts
 #ALERT_BACKUP_FAILED_ENABLED=true
 #ALERT_BACKUP_MISSING_ENABLED=true
 #ALERT_BACKUP_NOT_SUCCESSFULL_ENABLED=true
 #ALERT_NODE_DISK_SPACE_ENABLED=true
 #ALERT_NODE_MEMORY_USAGE_ENABLED=true
@@ -1,6 +0,0 @@
 # https://git.coopcloud.tech/coop-cloud/monitoring-ng/src/branch/main/scrape-config.example.yml
 # https://prometheus.io/docs/prometheus/latest/getting_started/#configure-prometheus-to-monitor-the-sample-targets
 - targets
  - 'm.laylotta.resisttechmonopolies.online:8082'
  - 'node.m.laylotta.resisttechmonopolies.online'
  - 'cadvisor.m.laylotta.resisttechmonopolies.online'
@@ -4,7 +4,7 @@
 ###############################################################################
 # BOILERPLATE SETTINGS (shouldn't need to change these)                       #
 ###############################################################################
-TYPE=mailu:3.0.1+2024.06.37
+TYPE=mailu:23309a1a+U
 LETS_ENCRYPT_ENV=production
 COMPOSE_FILE="compose.yml"
@@ -1,10 +0,0 @@
 TYPE=rtm-astro-recipe:6e6418fb
 DOMAIN=resisttechmonopolies.online
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.website.resisttechmonopolies.online`'
 EXTRA_DOMAINS=", `www.resisttechmonopolies.online`"
 LETS_ENCRYPT_ENV=production
 VERSION=0.0.26
@@ -1,4 +1,4 @@
-TYPE=shlink:0.1.0+4.4
+TYPE=shlink:21d93464
 DOMAIN=shlink.resisttechmonopolies.online
@@ -96,9 +96,9 @@ COMPOSE_FILE="compose.yml"
 ## BASIC_AUTH
 ## Use httpasswd to generate the secret
-COMPOSE_FILE="$COMPOSE_FILE:compose.basicauth.yml"
+#COMPOSE_FILE="$COMPOSE_FILE:compose.basicauth.yml"
-BASIC_AUTH=1
+#BASIC_AUTH=1
-SECRET_USERSFILE_VERSION=v1
+#SECRET_USERSFILE_VERSION=v1
 #####################################################################
 # Prometheus metrics                                                #
@@ -1,4 +1,4 @@
-TYPE=backup-bot-two:2.4.0+2.4.0
+TYPE=backup-bot-two:2.3.0+2.3.0-beta
 SECRET_RESTIC_PASSWORD_VERSION=v1
@@ -1,4 +1,4 @@
-TYPE=uptime-kuma:3.1.0+2.4.0
+TYPE=uptime-kuma:2.0.0+2.0.0-beta.1
 COMPOSE_FILE="compose.yml"
 LETS_ENCRYPT_ENV=production
@@ -1,4 +1,4 @@
-TYPE=vaultwarden:2.3.0+1.37.0
+TYPE=vaultwarden:2.1.1+1.34.3
 DOMAIN=vw.resisttechmonopolies.online
 LETS_ENCRYPT_ENV=production
@@ -1,4 +1,4 @@
-TYPE=authentik:11.0.4+2026.2.1
+TYPE=authentik:7.4.0+2025.6.3
 TIMEOUT=900
 ENABLE_AUTO_UPDATE=true
 POST_DEPLOY_CMDS="worker set_admin_pass"
@@ -25,11 +25,11 @@ AUTHENTIK_LOG_LEVEL=info
 AUTHENTIK_BOOTSTRAP_EMAIL=ammar@ammaratef45.ddns.net
 ## EMAIL
-AUTHENTIK_EMAIL__HOST=mail.resisttechmonopolies.online
+AUTHENTIK_EMAIL__HOST=smtp.protonmail.ch
-AUTHENTIK_EMAIL__PORT=465
+AUTHENTIK_EMAIL__PORT=587
 AUTHENTIK_EMAIL__USERNAME="besties@resisttechmonopolies.online"
-AUTHENTIK_EMAIL__USE_TLS=false
+AUTHENTIK_EMAIL__USE_TLS=true
-AUTHENTIK_EMAIL__USE_SSL=true
+AUTHENTIK_EMAIL__USE_SSL=false
 AUTHENTIK_EMAIL__TIMEOUT=10
 AUTHENTIK_EMAIL__FROM=besties@resisttechmonopolies.online
@@ -38,7 +38,7 @@ SECRET_SECRET_KEY_VERSION=v1
 SECRET_DB_PASSWORD_VERSION=v1
 SECRET_ADMIN_TOKEN_VERSION=v1
 SECRET_ADMIN_PASS_VERSION=v1
-SECRET_EMAIL_PASS_VERSION=v5
+SECRET_EMAIL_PASS_VERSION=v2
 # X_FRAME_OPTIONS_ALLOW_FROM=dashboard.example.org
@@ -0,0 +1,13 @@
 TYPE=calibre-web
 DOMAIN=calibre.resisttechmonopolies.online
 LETS_ENCRYPT_ENV=production
 DOCKER_MODS="linuxserver/calibre-web:calibre"
 OAUTHLIB_RELAX_TOKEN_SCOPE=1
 TZ="America/Los_Angeles"
 DEBUG=False
 # oauth2 support
 COMPOSE_FILE="compose.yml:compose.oauth2.yml"
@@ -0,0 +1,7 @@
 TYPE=collabora
 DOMAIN=collabora.resisttechmonopolies.online
 LETS_ENCRYPT_ENV=production
 NEXTCLOUD_DOMAIN=nextcloud.resisttechmonopolies.online
 ADMIN_USERNAME=admin
 SECRET_ADMIN_PASSWORD_VERSION=v1
 FRAME_ANCESTORS=
@@ -0,0 +1,7 @@
 TYPE=focalboard
 DOMAIN=focalboard.resisttechmonopolies.online
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.focalboard.resisttechmonopolies.online`'
 LETS_ENCRYPT_ENV=production
@@ -1,4 +1,4 @@
-TYPE=loomio:5.2.0+v3.0.20
+TYPE=loomio:5.1.2+v3.0.0
 COMPOSE_FILE="compose.yml"
 DOMAIN=loomio.resisttechmonopolies.online
@@ -19,5 +19,3 @@ abra app command nextcloud.resisttechmonopolies.online app run_occ "'db:add-miss
 #     Your installation has no default phone region set. This is required to validate phone numbers in the profile settings without a country code. To allow numbers without a country code, please add "default_phone_region" with the respective ISO 3166-1 code of the region to your config file.
 # Solution found at: https://help.nextcloud.com/t/your-installation-has-no-default-phone-region-set/153632/3
 abra app command nextcloud.resisttechmonopolies.online app run_occ "'config:system:set default_phone_region --value=\"us\"'"
 # move shared folder: "Node for share not found": https://github.com/nextcloud/server/issues/46467#issuecomment-2336672900
 abra app command nextcloud.resisttechmonopolies.online app run_occ "'sharing:delete-orphan-shares'"
@@ -1,6 +1,6 @@
-TYPE=radicale:0.1.0+3.0.6.0
+TYPE=radicale
 DOMAIN=radicale.resisttechmonopolies.online
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.radicale.resisttechmonopolies.online`'
-LETS_ENCRYPT_ENV=production
+LETS_ENCRYPT_ENV=production
@@ -0,0 +1,10 @@
 TYPE=rtm-astro-recipe:6e6418f
 DOMAIN=resisttechmonopolies.online
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.resisttechmonopolies.online`'
 LETS_ENCRYPT_ENV=production
 VERSION=0.0.10
@@ -1,16 +1,14 @@
-TYPE=traefik:5.1.1+v3.6.15
+TYPE=traefik:3.7.0+v3.6.2
-#TIMEOUT=300
+TIMEOUT=300
 ENABLE_AUTO_UPDATE=true
 ENABLE_BACKUPS=true
-DOMAIN=t.sootie.resisttechmonopolies.online
+DOMAIN=traefik.resisttechmonopolies.online
 LETS_ENCRYPT_ENV=production
 LETS_ENCRYPT_EMAIL=linnealovespie@proton.me
-DASHBOARD_ENABLED=true
+DASHBOARD_ENABLED=false
 # WARN, INFO etc.
 LOG_LEVEL=WARN
 LOG_MAX_AGE=1
 # This is here so later lines can extend it; you likely don't wanna edit
 COMPOSE_FILE="compose.yml"
@@ -19,14 +17,8 @@ COMPOSE_FILE="compose.yml"
 # General settings                                                  #
 #####################################################################
-## Ingress-mode port publishing for ports 80 and 443
+## Host-mode networking
-##
+COMPOSE_FILE="$COMPOSE_FILE:compose.host.yml"
 ## /!\ Using this prevents the use of any compose override adding
 ##     published ports to the traefik_app service (almost all of them)
 ##     and it prevents the use of IPv6 for ingress traffic.
 ##     Do not uncomment unless you know exactly what you are doing
 ##
 #COMPOSE_FILE="$COMPOSE_FILE:compose.no-host.yml"
 ## "Headless mode" (no domain configured)
 #COMPOSE_FILE="$COMPOSE_FILE:compose.headless.yml"
@@ -36,10 +28,8 @@ COMPOSE_FILE="compose.yml"
 #####################################################################
 ## Enable dns challenge (for wildcard domains)
-##   https://go-acme.github.io/lego/dns/#dns-providers
+##   https://doc.traefik.io/traefik/https/acme/#dnschallenge
 #LETS_ENCRYPT_DNS_CHALLENGE_ENABLED=1
 ## *Currently* one of ovh, gandi, gandiv5, digitalocean, azure, porkbun.
 ## Uncomment the corresponding provider below to insert your secret token/key.
 #LETS_ENCRYPT_DNS_CHALLENGE_PROVIDER=ovh
 ## OVH, https://ovh.com
@@ -67,25 +57,6 @@ COMPOSE_FILE="compose.yml"
 #DIGITALOCEAN_ENABLED=1
 #SECRET_DIGITALOCEAN_AUTH_TOKEN_VERSION=v1
 ## Azure, https://azure.com
 ## To insert your Azure client secret:
 ## abra app secret insert {myapp.example.coop} azure_secret v1 "<CLIENT_SECRET>"
 #COMPOSE_FILE="$COMPOSE_FILE:compose.azure.yml"
 #AZURE_ENABLED=1
 #AZURE_TENANT_ID=
 #AZURE_CLIENT_ID=
 #AZURE_SUBSCRIPTION_ID=
 #AZURE_RESOURCE_GROUP=
 #SECRET_AZURE_SECRET_VERSION=v1
 ## Porkbun, https://porkbun.com
 ## To insert your secrets:
 ## abra app secret insert 1312.net pb_api_key v1 pk1_413
 ## abra app secret insert 1312.net pb_s_api_key v1 sk1_612
 #COMPOSE_FILE="$COMPOSE_FILE:compose.porkbun.yml"
 #SECRET_PORKBUN_API_KEY_VERSION=v1
 #SECRET_PORKBUN_SECRET_API_KEY_VERSION=v1
 #####################################################################
 # Manual wildcard certificate insertion                             #
 #####################################################################
@@ -122,16 +93,14 @@ COMPOSE_FILE="compose.yml"
 ## Enable prometheus metrics collection
 ## used used by the coop-cloud monitoring stack
 ## BASIC_AUTH should also be enabled
 #COMPOSE_FILE="$COMPOSE_FILE:compose.metrics.yml"
 #METRICS_ENABLED=1
 #METRICS_FQDN=metrics.t.sootie.resisttechmonopolies.online
 #####################################################################
 # File provider directory configuration                             #
 # (Route bare metal and non-docker services on the machine!)        #
 #####################################################################
-#FILE_PROVIDER_DIRECTORY_ENABLED=1
+FILE_PROVIDER_DIRECTORY_ENABLED=1
 #####################################################################
 # Additional services                                               #
@@ -149,10 +118,6 @@ COMPOSE_FILE="compose.yml"
 # COMPOSE_FILE="$COMPOSE_FILE:compose.gitea.yml"
 # GITEA_SSH_ENABLED=1
 ## P2Panda UDP
 # COMPOSE_FILE="$COMPOSE_FILE:compose.p2panda.yml"
 # P2PANDA_ENABLED=1
 ## Foodsoft SMTP
 # COMPOSE_FILE="$COMPOSE_FILE:compose.foodsoft.yml"
 # FOODSOFT_SMTP_ENABLED=1
@@ -180,29 +145,4 @@ COMPOSE_FILE="compose.yml"
 ## "Web alt", an alternative web port
 # NOTE(3wc): as of 2024-04-01 only the `icecast` recipe uses this
 #COMPOSE_FILE="$COMPOSE_FILE:compose.web-alt.yml"
-#WEB_ALT_ENABLED=1
+#WEB_ALT_ENABLED=1
 ## Matrix
 #COMPOSE_FILE="$COMPOSE_FILE:compose.irc.yml"
 #IRC_ENABLED=1
 ## Garage
 #COMPOSE_FILE="$COMPOSE_FILE:compose.garage.yml"
 #GARAGE_RPC_ENABLED=1
 ## Nextcloud Talk HPB
 #COMPOSE_FILE="$COMPOSE_FILE:compose.nextcloud-talk-hpb.yml"
 #NEXTCLOUD_TALK_HPB_ENABLED=1
 ## Anubis
 #COMPOSE_FILE="$COMPOSE_FILE:compose.anubis.yml"
 #ANUBIS_COOKIE_DOMAIN=example.com
 #ANUBIS_DOMAIN=anubis.example.com
 #ANUBIS_REDIRECT_DOMAINS=
 #ANUBIS_OG_PASSTHROUGH=true
 #ANUBIS_OG_EXPIRY_TIME=1h
 #ANUBIS_OG_CACHE_CONSIDER_HOST=true
 #ANUBIS_SERVE_ROBOTS_TXT=true
 ## Enable onion service support
 #ONION_ENABLED=1
@@ -1,59 +0,0 @@
 TYPE=hedgedoc:3.0.8+1.10.7
 TIMEOUT=300
 ENABLE_AUTO_UPDATE=true
 ENABLE_BACKUPS=true
 DOMAIN=hedgedoc.resisttechmonopolies.online
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.hedgedoc.resisttechmonopolies.online`'
 LETS_ENCRYPT_ENV=production
 SECRET_SESSION_SECRET_VERSION=v1
 COMPOSE_FILE="compose.yml"
 # Anubis
 #COMPOSE_FILE="$COMPOSE_FILE:compose.anubis.yml"
 # PostgreSQL
 #COMPOSE_FILE="$COMPOSE_FILE:compose.postgresql.yml"
 #SECRET_DB_PASSWORD_VERSION=v1
 # OAuth, see https://docs.hedgedoc.org/guides/auth/keycloak/
 #COMPOSE_FILE="$COMPOSE_FILE:compose.oauth.yml"
 #CMD_OAUTH2_PROVIDERNAME="Keycloak"
 #CMD_OAUTH2_CLIENT_ID="hedgedoc"
 #CMD_OAUTH2_AUTHORIZATION_URL="https://keycloak.example.com/auth/realms/realmname/protocol/openid-connect/auth"
 #CMD_OAUTH2_TOKEN_URL="https://keycloak.example.com/auth/realms/realmname/protocol/openid-connect/token"
 #CMD_OAUTH2_USER_PROFILE_URL="https://keycloak.example.com/auth/realms/realmname/protocol/openid-connect/userinfo"
 #CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR=ocs.data.id
 #CMD_OAUTH2_USER_PROFILE_ID_ATTR=
 #CMD_OAUTH2_USER_PROFILE_DISPLAY_NAME_ATTR=ocs.data.display-name
 #CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR=ocs.data.email
 #CMD_OAUTH2_PROVIDERNAME=Keycloak
 #CMD_OAUTH2_SCOPE="openid email profile"
 #
 #SECRET_OAUTH_KEY_VERSION=v1
 # Options, see https://docs.hedgedoc.org/configuration/
 # CMD_ALLOW_ANONYMOUS=true
 # CMD_ALLOW_ANONYMOUS_EDITS=false
 # CMD_ALLOW_EMAIL_REGISTER=true
 # CMD_ALLOW_FREEURL=false
 # CMD_REQUIRE_FREEURL_AUTHENTICATION=true
 # CMD_ALLOW_GRAVATAR=true
 # CMD_ALLOW_ORIGIN=localhost
 # CMD_COOKIE_POLICY=lax
 # CMD_CSP_ADD_DISQUS=false
 # CMD_CSP_ADD_GOOGLE_ANALYTICS=false
 # CMD_CSP_ENABLE=true
 # CMD_CSP_REPORTURI=undefined
 # CMD_DEFAULT_PERMISSION=editable
 # CMD_EMAIL=true
 # CMD_SESSION_LIFE=1209600000
 # Only present in config.json (no equivalent env var):
 # DOCUMENT_MAX_LENGTH=100000
 # CMD_ENABLE_UPLOADS=registered
@@ -1,18 +0,0 @@
 TYPE=maubot:1.3.0+v0.6.0
 DOMAIN=mb.sootie.resisttechmonopolies.online
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.maubot.resisttechmonopolies.online`'
 LETS_ENCRYPT_ENV=production
 HOMESERVER_HOST=matrix.resisttechmonopolies.online
 # Client-server API URL
 HOMESERVER_URL=https://matrix.resisttechmonopolies.online
 ADMIN_USER_NAME=charlie
 ## Secrets
 SECRET_ADMIN_PASSWORD_VERSION=v1
 SECRET_HOMESERVER_REGISTRATION_VERSION=v1
`@@ -1,4 +1,4 @@`
	`TYPE=shlink:0.1.0+4.4`	`TYPE=shlink:21d93464`

	`DOMAIN=shlink.resisttechmonopolies.online`	`DOMAIN=shlink.resisttechmonopolies.online`
`@@ -1,4 +1,4 @@`
	`TYPE=backup-bot-two:2.4.0+2.4.0`	`TYPE=backup-bot-two:2.3.0+2.3.0-beta`

	`SECRET_RESTIC_PASSWORD_VERSION=v1`	`SECRET_RESTIC_PASSWORD_VERSION=v1`