test.env

# External-DNS Firewalla Webhook Configuration

# Required: Comma-separated list of domain filters
# Example: example.com,*.example.com,test.local
DOMAIN_FILTER=example.com

# Required: Shared secret for JWT authentication between proxy and webhook provider
# This must match the SHARED_SECRET in the proxy configuration
# Generate a secure random string: openssl rand -hex 32
SHARED_SECRET=your-secure-random-secret-here

# Optional: Provider API port (default: 8888)
PORT_PROVIDER=8888

# Optional: Health check API port (default: 8080)
PORT_HEALTH=8080

# Optional: Default TTL for DNS records in seconds (default: 300)
DNS_TTL=300

# Optional: Path to dnsmasq configuration directory
# Default: /home/pi/.firewalla/config/dnsmasq_local
DNSMASQ_DIR=/home/pi/.firewalla/config/dnsmasq_local

# Optional: Log level (error, warn, info, debug) (default: info)
LOG_LEVEL=info

# Optional: Dry run mode - don't actually make changes (default: false)
DRY_RUN=false

# Optional: Command to restart DNS service after changes
# Default: sudo systemctl restart firerouter_dns
# For containers with NoNewPrivileges=true, you may need to use:
# RESTART_COMMAND=systemctl restart firerouter_dns
# Or if running as root: RESTART_COMMAND=systemctl restart firerouter_dns
RESTART_COMMAND=sudo systemctl restart firerouter_dns