.env.dev.example

# Logging: PINT_LOG_DEV=true enables colored console output (dev preset).
# PINT_LOG_LEVEL controls verbosity: debug, info, warn, error (default: info).
PINT_LOG_DEV=true
PINT_LOG_LEVEL=debug

# Set PINT_DISABLE_OIDC=true to skip OIDC entirely and inject a static dev user.
# When enabled, PINT_CLIENT_ID/SECRET are not required.
PINT_DISABLE_OIDC=true

# Cookie-backed session secret. Required in production; auto-defaults to a dev
# placeholder when PINT_DISABLE_OIDC=true. Generate a production value with:
#   openssl rand -base64 32
#PINT_SESSION_SECRET=
#PINT_CLIENT_ID=pint-dev
#PINT_CLIENT_SECRET=changeme
PINT_SERVER_URL=http://localhost:8080
PINT_IPA_HOST=localhost:8088
PINT_IPA_SERVICE_ACCOUNT=krbprincipalname=pint/pint.csh.rit.edu@CSH.RIT.EDU,cn=services,cn=accounts,dc=csh,dc=rit,dc=edu
PINT_IPA_PASSWORD=stub
#PINT_IPA_ROOT_CA_NAME=ipa
#PINT_IPA_WIRELESS_CA_NAME=wireless
#PINT_IPA_RADSEC_CA_NAME=radsec
PINT_IPA_SKIP_TLS_VERIFY=true
#PINT_IPA_EAP_CLIENT_CERT_PROFILE=pint_eap_client
#PINT_IPA_RADSEC_CLIENT_CERT_PROFILE=pint_radsec_client
#PINT_IPA_RADSEC_SERVER_CERT_PROFILE=pint_radsec_server
#PINT_IPA_EAP_CERT_PROFILE=pint_eap_server
# iOS mobileconfig signing
PINT_IPA_CODE_SIGNING_CA_NAME=code_signing
#PINT_IPA_CODE_SIGNING_CERT_PROFILE=pint_profile_signing
PINT_PROFILE_SIGNING_CERT_SECRET=pint-profile-signing-cert
PINT_WIFI_SSID=CSH
PINT_NAMESPACE=pint
PINT_CONFIG_SECRET=pint-config
PINT_RADSEC_CERT_SECRET=pint-radsec-server-certificates
PINT_FREERADIUS_DEPLOYMENT=pint-freeradius
PINT_RADIUS_SERVER=127.0.0.1:32083
# FreeRADIUS status server queries (per-pod auth stats).
# In dev, pod IPs are unreachable from macOS — use the NodePort exposed on localhost instead.
# Requires: make dev-cluster to recreate the kind cluster with the UDP port mapping.
PINT_RADIUS_STATUS_ADDR=127.0.0.1:31181
#PINT_RADIUS_STATUS_PORT=18121
PINT_RADIUS_RADSEC_CHECK_CRL=false
#PINT_RADIUS_RADSEC_PROXY_PROTOCOL=true