Sanitize event-manager .env.example: remove all real credentials

Replace real values with empty placeholders:
- SECRET_KEY_BASE, DATABASE_PASSWORD, AUTHENTIK_CLIENT_ID/SECRET,
  SLACK_WEBHOOK_URL, BLUESKY_APP_PASSWORD, SMTP_PASSWORD

Also: fix VAR = value spacing -> VAR=value; update IMAGE_TAG -> IMAGE_VERSION;
add REDIS_URL and REDIS_IMAGE_VERSION; consolidate duplicate Slack webhook
entries; point OLLAMA_SERVER to internal Docker hostname.

Made-with: Cursor

Author: romkey

apps/event-manager/.env.example

@@ -1,21 +1,60 @@
-# Rails environment
+# ── Image versions ────────────────────────────────────────────────────────────
+#IMAGE_VERSION=latest
+#REDIS_IMAGE_VERSION=7-alpine
+
+# ── Rails ─────────────────────────────────────────────────────────────────────
 RAILS_ENV=production
+RAILS_LOG_TO_STDOUT=true
+RAILS_SERVE_STATIC_FILES=true
+RAILS_MAX_THREADS=5
+RAILS_HOST=events.pdxhackerspace.org
+RAILS_PROTOCOL=https
+
+# Generate with: openssl rand -hex 64
 SECRET_KEY_BASE=
 
-# Database (connects via postgres-net)
-DATABASE_URL=postgresql://event_manager:password@postgresql:5432/event_manager_production
+# ── Database (connects via postgres-net) ──────────────────────────────────────
+DATABASE_USER=eventmanager_user
+DATABASE_PASSWORD=
+DATABASE_NAME=eventmanager_db
+DATABASE_HOST=postgresql
+DATABASE_URL=postgres://${DATABASE_USER}:${DATABASE_PASSWORD}@${DATABASE_HOST}:5432/${DATABASE_NAME}
+
+# Used by db-backup to back up this service's database
+BACKUP_DATABASE_URLS=postgresql://${DATABASE_USER}:${DATABASE_PASSWORD}@${DATABASE_HOST}:5432/${DATABASE_NAME}
 
-# Redis (internal event-manager-redis container)
+# ── Redis (internal event-manager-redis container) ────────────────────────────
 REDIS_URL=redis://event-manager-redis:6379/0
 
-# Outbound email via postfix (connects via postfix-net)
-SMTP_HOST=postfix
-SMTP_PORT=587
-SMTP_FROM=noreply@example.com
+# ── Authentication (Authentik) ────────────────────────────────────────────────
+AUTHENTIK_SITE_URL=https://auth.pdxhackerspace.org
+AUTHENTIK_CLIENT_ID=
+AUTHENTIK_CLIENT_SECRET=
 
-# Application URL
-APP_HOST=events.example.com
+# ── Outbound email (connects via postfix-net) ─────────────────────────────────
+SMTP_ADDRESS=postfix
+SMTP_PORT=25
+SMTP_DOMAIN=pdxhackerspace.org
+SMTP_USERNAME=
+SMTP_PASSWORD=
+SMTP_AUTHENTICATION=plain
+SMTP_ENABLE_STARTTLS=false
+MAILER_FROM_EMAIL=info@pdxhackerspace.org
 
-# Image versions (optional, defaults shown)
-#IMAGE_VERSION=latest
-#REDIS_IMAGE_VERSION=7-alpine
+# ── Slack notifications ───────────────────────────────────────────────────────
+# Webhook URL for the target channel (e.g. #announcements)
+SLACK_WEBHOOK_URL=
+# Uncomment and set a second webhook for a different channel if needed
+#SLACK_WEBHOOK_URL_SECONDARY=
+
+# ── Bluesky ───────────────────────────────────────────────────────────────────
+BLUESKY_HANDLE=pdxhackerspace.org
+BLUESKY_APP_PASSWORD=
+BLUESKY_MAX_IMAGE_SIZE=950000
+
+# ── Ollama (optional AI integration) ─────────────────────────────────────────
+#OLLAMA_SERVER=http://ollama:11434
+
+# ── Misc ──────────────────────────────────────────────────────────────────────
+TZ=America/Los_Angeles
+RUN_MIGRATIONS=true