# Copy to /etc/tunnel-client.env and set values.
# Required:
TUNNEL_SERVER=ingress.nixc.us:2222
# Optional: if you run deploy/sms/ssh-relay on SMS, use the same public key in
# authorized_keys on ingress and: TUNNEL_SERVER=sms.taylor-co.com:2222
TUNNEL_DOMAIN=myapp.example.com
TUNNEL_KEY=/etc/tunnel-client/id_ed25519
# Recommended for production host-key verification:
# TUNNEL_KNOWN_HOSTS=/etc/tunnel-client/known_hosts
# TUNNEL_STRICT_HOST_KEY=true

# Add this key's public half to the tunnel user's ~/.ssh/authorized_keys on ingress.nixc.us.

# Optional (defaults shown):
# TUNNEL_PORT=8080
# TUNNEL_BACKEND_TLS=auto   # auto, plain, or tls
# TUNNEL_AUTH_USER=
# TUNNEL_AUTH_PASS=
# TUNNEL_LABELS=
# TUNNEL_LABELS_FILE=
#
# Custom labels can use placeholders such as {router}, {service}, {tunKey},
# {domain}, and {port}. Example:
# TUNNEL_LABELS=traefik.http.routers.{router}.priority=100