# Headplane configuration for standalone Headscale UI.
# Do not put raw secrets in this file. Runtime secrets are read from /run/secrets/headplane/*.

server:
  host: "0.0.0.0"
  port: 3000
  base_url: "@HEADPLANE_BASE_URL@"
  cookie_secret_path: "/run/secrets/headplane/cookie_secret"
  cookie_secure: false
  cookie_max_age: 86400
  data_path: "/var/lib/headplane"

headscale:
  url: "http://headscale:8080"
  public_url: "@HEADSCALE_SERVER_URL@"
  config_path: "/etc/headscale/config.yaml"
  api_key_path: "/run/secrets/headplane/headscale_api_key"
  config_strict: false
  dns_records_path: "/etc/headscale/dns_records.json"

integration:
  agent:
    enabled: false
    pre_authkey: ""
  docker:
    enabled: true
    container_label: "me.tale.headplane.target=headscale"
    socket: "unix:///var/run/docker.sock"
  kubernetes:
    enabled: false
    pod_name: "headscale"
  proc:
    enabled: false