# TrueNAS connection
TRUENAS_HOST=192.168.10.10
SSH_USER=youruser

# Jail configuration
JAIL_NAME=adguard
# Must be OUTSIDE the Fritzbox DHCP pool (.20-.200). .11 sits right next to the NAS (.10).
JAIL_IP=192.168.10.11
SUBNET_CIDR=24
DEFAULT_ROUTER=192.168.10.1
# Optional IPv6 for the jail. Leave JAIL_IP6 empty/commented to stay IPv4-only.
# Use an address outside any DHCPv6/SLAAC pool (a GUA from your prefix or a ULA).
# JAIL_IP6=fd00:dead:beef::11
# SUBNET6_PREFIX=64
# DEFAULT_ROUTER6=fd00:dead:beef::1
BRIDGE=bridge0
# Use a release already fetched on the NAS (check: iocage list -r). 13.5-RELEASE is present.
JAIL_RELEASE=13.5-RELEASE

# TrueNAS REST API key. Used by the optional scripts/nas-*.py helpers (which talk
# to the jail as root over the REST API, no sudo). Create one in the TrueNAS UI
# under Credentials > Local Users > (your user) > API Key, or Settings > API Keys.
# TRUENAS_API_KEY=1-xxxxxxxxxxxx

# AdGuard web UI admin, used by `provision`.
# - ADGUARD_ADMIN_USER: web UI username.
# - ADGUARD_ADMIN_PASSWORD: set only for the FIRST provision (or to rotate the
#   password); it is bcrypt-hashed at provision time. If left unset/commented,
#   provision preserves the hash already stored in the jail, so re-runs never
#   lock you out.
ADGUARD_ADMIN_USER=admin
# ADGUARD_ADMIN_PASSWORD=change-me-on-first-provision

# Automatic in-jail `pkg` updates of AdGuard Home via cron (5-field crontab
# format). Default: weekly, Sunday 04:00. Set empty to disable the cron job.
# After each upgrade the daemon-free rc script is restored automatically.
AUTO_UPDATE_SCHEDULE=0 4 * * 0

# Watchdog cron: restart AdGuard Home if its process dies. Empty string disables.
WATCHDOG_SCHEDULE=* * * * *