2026-09-23 12:41:44 -04:00
|
|
|
# Example environment for the NestQuest API container deployment.
|
|
|
|
|
#
|
|
|
|
|
# Copy to ``deploy/.env`` (git-ignored) and fill in REAL values there;
|
|
|
|
|
# this example carries placeholder names only and is never a source of
|
|
|
|
|
# secrets. Compose loads ``deploy/.env`` into the api service; the
|
|
|
|
|
# API fails fast on startup when any of these is unset or empty
|
|
|
|
|
# (api/config.py — there are no silent defaults).
|
|
|
|
|
|
|
|
|
|
# The static panel-plane service token the HA integration presents as
|
|
|
|
|
# a Bearer credential on /api/v1/panel/* routes. Generate one, e.g.:
|
|
|
|
|
# python -c "import secrets; print(secrets.token_urlsafe(32))"
|
|
|
|
|
NESTQUEST_PANEL_TOKEN=
|
|
|
|
|
|
|
|
|
|
# The Authentik OIDC settings the admin plane verifies JWTs against.
|
|
|
|
|
NESTQUEST_OIDC_ISSUER=
|
|
|
|
|
NESTQUEST_OIDC_AUDIENCE=
|
2026-09-24 08:00:04 -04:00
|
|
|
NESTQUEST_OIDC_JWKS_URL=
|
|
|
|
|
|
|
|
|
|
# The host interface the API's port 8080 is published on (compose
|
|
|
|
|
# interpolation, not read by the API). Defaults to 127.0.0.1 when
|
|
|
|
|
# unset; on the API box set the LAN address the reverse proxy
|
|
|
|
|
# forwards to, e.g. 10.60.1.14.
|
|
|
|
|
NESTQUEST_BIND_ADDRESS=
|
