# punktfunk web console — packaged config reference.
#
# On a `apt install punktfunk-web` install you DO NOT edit anything: the systemd --user units wire
# everything automatically —
#   punktfunk-web.service sets PUNKTFUNK_MGMT_URL=https://127.0.0.1:47990, NODE_TLS_REJECT_UNAUTHORIZED=0,
#   PORT=3000, HOST=0.0.0.0, and sources:
#     ~/.config/punktfunk/mgmt-token    (written by the host's `serve` — the shared bearer token)
#     ~/.config/punktfunk/web-password  (written by punktfunk-web-init — the console login password)
#
# This file documents the variables for a MANUAL deploy (running `node .output/server/index.mjs`
# yourself). The mgmt API is HTTPS with the host's self-signed loopback cert, so the proxy needs
# NODE_TLS_REJECT_UNAUTHORIZED=0 (its only outbound TLS hop is that loopback connection).
PUNKTFUNK_MGMT_URL=https://127.0.0.1:47990
NODE_TLS_REJECT_UNAUTHORIZED=0
PORT=3000
HOST=0.0.0.0

# Match the host's ~/.config/punktfunk/mgmt-token (auto-generated by the host if unset):
PUNKTFUNK_MGMT_TOKEN=

# Console login password (fails closed if unset on the built server):
PUNKTFUNK_UI_PASSWORD=