# Copy this file to .env and fill in the three values below.
# NEVER commit .env -- it holds your VPN private key. (.gitignore excludes it.)
# After creating it:  chmod 600 .env

# WireGuard private key -- from your provider's config file, [Interface] PrivateKey
WIREGUARD_PRIVATE_KEY=

# WireGuard address -- from the same config, [Interface] Address (usually a /32)
WIREGUARD_ADDRESSES=10.2.0.2/32

# Gluetun control-server API key (every route of :8000 requires it). Nothing in
# this stack uses the API; the key only has to exist. Must not be empty.
# Generate one:  openssl rand -hex 32
GLUETUN_API_KEY=

# The web-UI login is NOT set here. It is a bcrypt htpasswd file you generate on
# the host (webauth-htpasswd), not an environment variable. See the README "Setup".