# Copy to .env and adjust. .env is git-ignored; this file is not.
# NEVER put the real token in this file.

# ─── Required ───────────────────────────────────────────────────────
# Cloudflare Zero Trust tunnel token.
#
#   Dashboard -> Zero Trust -> Networks -> Tunnels -> (your tunnel) -> Configure
#   https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/
#
# The dashboard shows a pre-filled `docker run ... --token <TOKEN>` command.
# Copy only the token itself, not the whole command.
#
# Treat it like a password: anyone holding it can route traffic into your
# network. If it leaks, delete the tunnel in the dashboard and make a new one
# — the token cannot be rotated on its own.
TUNNEL_TOKEN=

# ─── Shared ─────────────────────────────────────────────────────────
# Defaulted to Etc/UTC in compose.yaml. Only affects log timestamps here.
#TZ=Europe/Paris