# BunkerWeb API configuration.
#
# Every key is optional, the file only has to exist for the API to start.
# Environment variables take precedence over the values set here.
# See https://docs.bunkerweb.io/1.6.15/api/ for the full list.
#
# The listen address is not read from this file, it comes from the
# environment. The rc script binds to 127.0.0.1, override it in rc.conf
# if the API has to be reachable from other instances:
#
#   bunkerweb_api_env="API_LISTEN_ADDR=0.0.0.0 API_LISTEN_PORT=8888"

# Bearer token for the /auth endpoint, unset means Biscuit tokens only.
#API_TOKEN: ""

# Clients allowed to reach the API. 127.0.0.1 is needed because the rc
# script binds the API to localhost.
#API_WHITELIST_ENABLED: "yes"
API_WHITELIST_IPS: "127.0.0.1 192.168.0.0/16 172.16.0.0/12 10.0.0.0/8"

# Lifetime of issued Biscuit tokens in seconds, 0 disables expiry.
#API_BISCUIT_TTL_SECONDS: 3600

# Rate limiting.
#API_RATE_LIMIT_ENABLED: "yes"
#API_RATE_LIMIT: "100r/m"
#API_RATE_LIMIT_AUTH: "10r/m"

# Documentation endpoints.
#API_DOCS_URL: "/docs"
#API_REDOC_URL: "/redoc"
#API_OPENAPI_URL: "/openapi.json"