# Environment Variables — Zammad

> **Terakhir Diperbarui:** 2026-07-02
> ⚠️ **Jangan commit nilai secret.** File `.env` hanya di server `/opt/stacks/zammad/`.

---

## Zammad Docker (target)

| Variable | Contoh | Keterangan |
|----------|--------|------------|
| `POSTGRES_HOST` | `10.100.1.25` | PostgreSQL eksternal |
| `POSTGRES_PORT` | `5432` | |
| `POSTGRES_USER` | `zammad` | User dedicated |
| `POSTGRES_PASS` | **SECRET** | Password DB |
| `POSTGRES_DB` | `zammad` | Nama database |
| `REDIS_URL` | `redis://zammad-redis:6379` | Internal compose |
| `ELASTICSEARCH_URL` | `http://zammad-elasticsearch:9200` | Internal compose |
| `ZAMMAD_FQDN` | `zammad.gisportal.id` | Hostname publik |

---

## S3 Storage (QNAP OSS)

| Variable | Nilai | Keterangan |
|----------|-------|------------|
| `S3_URL` | *(lihat storage.yml)* | Atau file `storage.yml` |
| Endpoint | `http://10.100.1.10:8010` | Internal dari server .24 |
| Bucket | `zammad-attachments` | Private |
| Access key format | `super-apps:<key-id>` | Reuse credential geonet-console |
| Secret | **SECRET** | Dari `/opt/stacks/geonet-console/.env` |
| `force_path_style` | `true` | Wajib untuk QNAP |

Contoh `storage.yml` (nilai secret dari server, bukan repo):

```yaml
s3:
  access_key_id: 'super-apps:<key-id>'
  secret_access_key: '<from-server-env>'
  region: 'us-east-1'
  endpoint: 'http://10.100.1.10:8010'
  bucket: 'zammad-attachments'
  force_path_style: true
  request_checksum_calculation: when_required
  response_checksum_validation: when_required
```

---

## LDAP (Active Directory)

| Variable | Nilai |
|----------|-------|
| LDAP host | `10.100.1.40` |
| LDAP port | `389` |
| Base DN | `DC=gisportal,DC=id` |
| Bind DN | `Administrator@gisportal.id` *(atau service account)* |
| Bind password | **SECRET** |

> Detail LDAP mengikuti pola `server-connection/docs/environment.md`.

---

## Lokasi Secret

| Secret | Lokasi |
|--------|--------|
| Zammad `.env` | `/opt/stacks/zammad/.env` di 10.100.1.24 |
| OSS secret (reuse) | `/opt/stacks/geonet-console/.env` |
| LDAP bind | Zammad `.env` atau UI admin (prefer env) |