# Bind locally and place a TLS reverse proxy in front of the service.
straywild_DISCOVERY_HOST=127.0.0.1
straywild_DISCOVERY_PORT=7770
straywild_DISCOVERY_ROOM_TTL=45
straywild_DISCOVERY_MAX_ROOMS=4096
straywild_DISCOVERY_MAX_ROOMS_PER_ADDRESS=32
straywild_DISCOVERY_MAX_BODY_BYTES=8192
straywild_DISCOVERY_LOG_LEVEL=INFO
# Set this to the exact deployed Git commit so /health identifies the build.
straywild_DISCOVERY_BUILD_REVISION=development

# Public UDP rendezvous used to observe ENet mappings and coordinate hole punching.
straywild_DISCOVERY_TRAVERSAL_HOST=0.0.0.0
straywild_DISCOVERY_TRAVERSAL_PORT=7771
straywild_DISCOVERY_TRAVERSAL_PUBLIC_HOST=discovery.straywild.io

# Allocation-based ENet/UDP privacy relay for player-hosted rooms. Player hosts
# explicitly select direct or relay discovery. Dedicated rooms are always
# direct and are rejected if they request this shared relay. Open the complete
# UDP range in the host and provider firewalls. Relay joins fail closed and
# never downgrade to direct when an allocation is unavailable.
straywild_DISCOVERY_RELAY_ENABLED=true
straywild_DISCOVERY_RELAY_HOST=0.0.0.0
straywild_DISCOVERY_RELAY_PUBLIC_HOST=discovery.straywild.io
straywild_DISCOVERY_RELAY_PORT_START=20000
straywild_DISCOVERY_RELAY_PORT_END=22047
straywild_DISCOVERY_RELAY_MAX_ALLOCATIONS=2048
straywild_DISCOVERY_RELAY_AUTH_TTL=12
straywild_DISCOVERY_RELAY_IDLE_TTL=120

# Only trust X-Forwarded-For when the immediate peer is within one of these CIDRs.
# The loopback values suit a reverse proxy on the same host.
straywild_DISCOVERY_TRUSTED_PROXY_CIDRS=127.0.0.0/8,::1/128

# Privacy invariant: the application does not emit request/access logs. The
# reverse proxy must also have access logging disabled for discovery routes;
# never log peer addresses, request bodies, headers, capabilities, or tokens.