# ── Bind DNS GUI — Environment Variables ──────────────────────────────
# Copy this file to .env and fill in your values before running:
#   docker compose up -d
#
#   cp .env.example .env   (Linux/macOS)
#   copy .env.example .env  (Windows)

# ── Required ─────────────────────────────────────────────────────────

# Secret key used to encrypt session cookies.
# Generate a strong random value:
#   openssl rand -base64 32
AUTH_SECRET=changeme-to-a-random-secret

# Admin account password.
# Choose something strong — this is the only gate to your DNS UI.
ADMIN_PASSWORD=changeme-to-something-strong

# ── Optional ─────────────────────────────────────────────────────────

# Admin username (default: admin)
ADMIN_USERNAME=admin

# Public URL of the GUI. Change if running behind a reverse proxy.
#   e.g. NEXTAUTH_URL=https://dns.example.com

# BIND9 container hostnames for rndc and nsupdate communication
# These are the Docker Compose service names inside the dns-net network.
# Only change if your BIND container has a different hostname.
# BIND_RNDC_HOST=bind9
# BIND_DNS_HOST=bind9

# Path to the TSIG key file for nsupdate authentication
# TSIG_KEY_FILE=/etc/bind/bind-gui.key
NEXTAUTH_URL=http://localhost:3001