agent.env.example

# Agent config. Identity comes from the invite token; everything else
# lives in env.

# Invite token from `towonel invite create` (tenant's first run only).
TOWONEL_INVITE_TOKEN=tt_inv_2_...

# Services this agent exposes, as a JSON array. Edge routes by SNI match on
# `hostname`. `tls_mode` defaults to passthrough; set `terminate` to let the
# edge handshake TLS itself.
TOWONEL_AGENT_SERVICES=[{"hostname":"app.example.eu","origin":"127.0.0.1:8080"},{"hostname":"api.example.eu","origin":"127.0.0.1:9000","tls_mode":{"mode":"terminate"}}]

# Optional: relay URL override. Accepts a comma-separated list of relays. The
# hub also serves relay URL(s) in its bootstrap response (TOWONEL_HUB_RELAY_URL
# on the hub side), which the agent uses by default. Set this only to override
# the hub's value.
# TOWONEL_AGENT_RELAY_URL=https://relay1.towonel.dev:8443,https://relay2.towonel.dev:8443

# Optional: bind iroh on a fixed UDP port (default: ephemeral). Required for
# Kubernetes NodePort Services since the Service targetPort must be known.
# TOWONEL_AGENT_IROH_PORT=51820

# Optional: extra publicly-reachable socket addresses to advertise to peers
# (CSV of `host:port`, IPv6 in brackets). Useful for static NodePort mappings.
# TOWONEL_AGENT_EXTRA_LOCAL_ADDRS=1.2.3.4:31820,[2001:db8::1]:31820

# Optional: in-cluster auto-discovery of Node IPs + Service UDP nodePorts.
# Requires NODE_NAME (downward API). Service name defaults to "towonel-agent";
# namespace from TOWONEL_AGENT_K8S_NAMESPACE, POD_NAMESPACE, or the service
# account token mount.
# TOWONEL_AGENT_K8S_AUTODISCOVER=true
# TOWONEL_AGENT_K8S_SERVICE=towonel-agent
# TOWONEL_AGENT_K8S_NAMESPACE=towonel