# Environment for the NetBird relay container. This example is insecure; the operator
# overrides NB_AUTH_SECRET in production.

NB_LOG_LEVEL=info

# The relay listens on 33080 (plaintext WebSocket); Traefik terminates TLS on 443 and routes
# the /relay path prefix here.
NB_LISTEN_ADDRESS=:33080

# The address peers are told to use to reach the relay, through Traefik on 443 (rels:// is
# relay-over-TLS). Set this to your NetBird host name.
NB_EXPOSED_ADDRESS=rels://netbird:443/relay

# Shared secret between the relay and the management service. MUST match the "Secret" field
# of the "Relay" block in management.json.
NB_AUTH_SECRET=7JIlAKQH6IbK2tNftT8FM3FoH0cadUhiO/q/GubbxVM=