37 lines
1.8 KiB
Text
37 lines
1.8 KiB
Text
# Bind locally and place a TLS reverse proxy in front of the service.
|
|
straywild_DISCOVERY_HOST=127.0.0.1
|
|
straywild_DISCOVERY_PORT=7770
|
|
straywild_DISCOVERY_ROOM_TTL=45
|
|
straywild_DISCOVERY_MAX_ROOMS=4096
|
|
straywild_DISCOVERY_MAX_ROOMS_PER_ADDRESS=32
|
|
straywild_DISCOVERY_MAX_BODY_BYTES=8192
|
|
straywild_DISCOVERY_LOG_LEVEL=INFO
|
|
# Set this to the exact deployed Git commit so /health identifies the build.
|
|
straywild_DISCOVERY_BUILD_REVISION=development
|
|
|
|
# Public UDP rendezvous used to observe ENet mappings and coordinate hole punching.
|
|
straywild_DISCOVERY_TRAVERSAL_HOST=0.0.0.0
|
|
straywild_DISCOVERY_TRAVERSAL_PORT=7771
|
|
straywild_DISCOVERY_TRAVERSAL_PUBLIC_HOST=discovery.straywild.io
|
|
|
|
# Allocation-based ENet/UDP privacy relay for player-hosted rooms. Player hosts
|
|
# explicitly select direct or relay discovery. Dedicated rooms are always
|
|
# direct and are rejected if they request this shared relay. Open the complete
|
|
# UDP range in the host and provider firewalls. Relay joins fail closed and
|
|
# never downgrade to direct when an allocation is unavailable.
|
|
straywild_DISCOVERY_RELAY_ENABLED=true
|
|
straywild_DISCOVERY_RELAY_HOST=0.0.0.0
|
|
straywild_DISCOVERY_RELAY_PUBLIC_HOST=discovery.straywild.io
|
|
straywild_DISCOVERY_RELAY_PORT_START=20000
|
|
straywild_DISCOVERY_RELAY_PORT_END=22047
|
|
straywild_DISCOVERY_RELAY_MAX_ALLOCATIONS=2048
|
|
straywild_DISCOVERY_RELAY_AUTH_TTL=12
|
|
straywild_DISCOVERY_RELAY_IDLE_TTL=120
|
|
|
|
# Only trust X-Forwarded-For when the immediate peer is within one of these CIDRs.
|
|
# The loopback values suit a reverse proxy on the same host.
|
|
straywild_DISCOVERY_TRUSTED_PROXY_CIDRS=127.0.0.0/8,::1/128
|
|
|
|
# Privacy invariant: the application does not emit request/access logs. The
|
|
# reverse proxy must also have access logging disabled for discovery routes;
|
|
# never log peer addresses, request bodies, headers, capabilities, or tokens.
|