.env

# Image Versions
TRAEFIK_VER="v3.6.15"
STEPCA_VER="0.30.2"
DOZZLE_VER="latest"

# Shared Tailscale/CoreDNS runtime images
ALPINE_IMAGE="alpine:3.24"
COREDNS_IMAGE="coredns/coredns:1.14.4"
GOMPLATE_IMAGE="hairyhenderson/gomplate:v5.1.0-alpine"
TAILSCALE_IMAGE="tailscale/tailscale:v1.102.2"

# This will be the Certificate Authority (CA) for the local development environment.
# Certificates will be issued by this CA.
DOCKER_STEPCA_INIT_NAME="Local Dev CA"
# This is where the step-ca server accept connections.
# Traefik will requests certificates through `host.docker.internal:9000`
DOCKER_STEPCA_INIT_DNS_NAMES="localhost,127.0.0.1,host.docker.internal"
# From docs: (recommended) DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT enable remote provisioner management⁠
DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT="true"
# From docs: DOCKER_STEPCA_INIT_ACME also create an initial ACME provisioner for the CA
DOCKER_STEPCA_INIT_ACME="true"

# Prefix used in Traefik labels
TRAEFIK_PREFIX="traefik"

# Base domain used to expose containers over
TRAEFIK_DOMAIN="traefik.tail.gg"

# Certificate resolver to use for TLS termination
TRAEFIK_CERT_RESOLVER="stepca"

# Traefik entrypoint for HTTPS traffic
TRAEFIK_HTTPS_ENTRYPOINT="websecure"

# Traefik entrypoint for TCP traffic
# This environment is not in use at the moment
# due to lack of a container that needs it,
# but the usage is the same as HTTPS
TRAEFIK_TCP_ENTRYPOINT="shared"

# Tailscale subnet-router and split-DNS configuration
TS_HOSTNAME="docker-subnet-router"
TS_ROUTES="10.10.10.0/24,172.16.0.0/12"
TS_SERVICE_SUBNET="10.10.10.0/24"
TS_DNS_SERVER="10.10.10.10"
TAIL_DOMAIN="tail.gg"
DIRECT_DOMAIN="dkr.tail.gg"