server:
  host: 0.0.0.0
  port: 3000
  base_url: https://headscale.example.com
  cookie_secret: REPLACE_WITH_OPENSSL_RAND_HEX_32
  cookie_secure: true
  data_path: /var/lib/headplane

headscale:
  url: http://headscale:8080
  public_url: https://headscale.example.com
  config_path: /etc/headscale/config.yaml
  config_strict: true
  api_key: REPLACE_WITH_HEADSCALE_API_KEY

# Optional OIDC example. Uncomment only in the ignored config.yaml file.
# oidc:
#   issuer: https://auth.example.com/application/o/headscale/
#   client_id: REPLACE_WITH_OIDC_CLIENT_ID
#   client_secret: REPLACE_WITH_OIDC_CLIENT_SECRET
#   use_pkce: true
#   scope: openid email profile groups headplane_role
#   default_role: member
#   role_claim: headplane_role

integration:
  agent:
    enabled: false
  docker:
    enabled: true
    container_label: me.tale.headplane.target=headscale
    socket: unix:///var/run/docker.sock
  kubernetes:
    enabled: false
    pod_name: ""
  proc:
    enabled: false