2022-06-24 14:50:14 +02:00
|
|
|
## example file, you can copy this file to setup.env and update its values
|
|
|
|
##
|
|
|
|
# Dashboard domain. e.g. app.mydomain.com
|
|
|
|
NETBIRD_DOMAIN=""
|
2023-04-04 00:21:40 +02:00
|
|
|
|
|
|
|
# -------------------------------------------
|
|
|
|
# OIDC
|
|
|
|
# e.g., https://example.eu.auth0.com/.well-known/openid-configuration
|
|
|
|
# -------------------------------------------
|
2022-08-24 14:37:18 +02:00
|
|
|
NETBIRD_AUTH_OIDC_CONFIGURATION_ENDPOINT=""
|
|
|
|
NETBIRD_AUTH_AUDIENCE=""
|
2022-08-17 21:44:20 +02:00
|
|
|
# e.g. netbird-client
|
|
|
|
NETBIRD_AUTH_CLIENT_ID=""
|
2023-02-03 21:47:20 +01:00
|
|
|
# if you want to use a custom claim for the user ID instead of 'sub', set it here
|
|
|
|
# NETBIRD_AUTH_USER_ID_CLAIM=""
|
2022-08-17 21:44:20 +02:00
|
|
|
# indicates whether to use Auth0 or not: true or false
|
|
|
|
NETBIRD_USE_AUTH0="false"
|
2022-08-24 14:37:18 +02:00
|
|
|
NETBIRD_AUTH_DEVICE_AUTH_PROVIDER="none"
|
|
|
|
NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID=""
|
2023-04-05 21:57:47 +02:00
|
|
|
# Some IDPs requires different audience, scopes and to use id token for device authorization flow
|
|
|
|
# you can customize here:
|
2023-04-04 15:56:02 +02:00
|
|
|
NETBIRD_AUTH_DEVICE_AUTH_AUDIENCE=$NETBIRD_AUTH_AUDIENCE
|
2023-04-05 21:57:47 +02:00
|
|
|
NETBIRD_AUTH_DEVICE_AUTH_SCOPE="openid"
|
|
|
|
NETBIRD_AUTH_DEVICE_AUTH_USE_ID_TOKEN=false
|
2023-06-02 17:34:36 +02:00
|
|
|
eg. zitadel, auth0, azure, keycloak
|
|
|
|
NETBIRD_MGMT_IDP="none"
|
|
|
|
# Some IDPs requires different client id and client secret for management api
|
|
|
|
NETBIRD_IDP_MGMT_CLIENT_ID=$NETBIRD_AUTH_CLIENT_ID
|
|
|
|
NETBIRD_IDP_MGMT_CLIENT_SECRET=""
|
2023-04-04 00:21:40 +02:00
|
|
|
|
2022-10-12 12:25:46 +02:00
|
|
|
# if your IDP provider doesn't support fragmented URIs, configure custom
|
|
|
|
# redirect and silent redirect URIs, these will be concatenated into your NETBIRD_DOMAIN domain.
|
|
|
|
# NETBIRD_AUTH_REDIRECT_URI="/peers"
|
2022-10-16 13:33:46 +02:00
|
|
|
# NETBIRD_AUTH_SILENT_REDIRECT_URI="/add-peers"
|
2023-04-04 15:56:02 +02:00
|
|
|
# Updates the preference to use id tokens instead of access token on dashboard
|
|
|
|
# Okta and Gitlab IDPs can benefit from this
|
|
|
|
# NETBIRD_TOKEN_SOURCE="idToken"
|
2022-10-16 13:33:46 +02:00
|
|
|
|
2023-04-04 00:21:40 +02:00
|
|
|
# -------------------------------------------
|
|
|
|
# Letsencrypt
|
|
|
|
# -------------------------------------------
|
|
|
|
# Disable letsencrypt
|
|
|
|
# if disabled, cannot use HTTPS anymore and requires setting up a reverse-proxy to do it instead
|
|
|
|
NETBIRD_DISABLE_LETSENCRYPT=false
|
|
|
|
# e.g. hello@mydomain.com
|
|
|
|
NETBIRD_LETSENCRYPT_EMAIL=""
|
|
|
|
|
2022-10-16 13:33:46 +02:00
|
|
|
# Disable anonymous metrics collection, see more information at https://netbird.io/docs/FAQ/metrics-collection
|
2022-12-13 13:42:43 +01:00
|
|
|
NETBIRD_DISABLE_ANONYMOUS_METRICS=false
|
|
|
|
# DNS DOMAIN configures the domain name used for peer resolution. By default it is netbird.selfhosted
|
2023-04-04 15:56:02 +02:00
|
|
|
NETBIRD_MGMT_DNS_DOMAIN=netbird.selfhosted
|