# wg-portal Konfiguration für Pfannkuchen VPS
# Docs: https://wgportal.org/master/documentation/overview/
# Credentials kommen aus sops-entschlüsselter .env

advanced:
  log_level: info
  # config_storage_path: ""  # DEAKTIVIERT – wg0.conf wird manuell verwaltet!
  startup_import_peers: []
  startup_create_unknown_peers: false
  startup_create_default_peer: false
  restore_state: true

core:
  admin_user: ${WG_PORTAL_ADMIN_USER}
  admin_password: ${WG_PORTAL_ADMIN_PASSWORD}
  editable_keys: true
  import_existing: true
  restore_state: true
  create_default_peer_on_login: false
  create_default_peer_on_user_creation: false
  self_provisioning_allowed: false

database:
  type: sqlite
  dsn: "/app/data/wg_portal.db"

web:
  external_url: "https://vpn.sascha-lutz.de"
  request_logging: true
  listening_address: ":8888"

statistics:
  use_ping_checks: false
  collect_interface_data: true
  collect_peer_data: true

backend:
  default: local