# -> %h/idea-collect/secrets/caddy.env (rendered by Ansible) DOMAIN=ideas.example.com ACME_EMAIL=ops@example.com GCP_PROJECT=my-gcp-project BACKEND_UPSTREAM=backend:8080 # The googleclouddns ACME plugin reads service-account credentials from this path. GOOGLE_APPLICATION_CREDENTIALS=/etc/caddy/gcp-dns-sa.json