# penguins.lan config. Copy to .env (it's gitignored).
#
# DEV_MAC forces every client's MAC to this value so you can exercise the
# MAC-based login flow locally, where the browser is on loopback and never
# appears in the ARP table. NEVER set this in production — it would make every
# visitor share one identity.
# DEV_MAC=aa:bb:cc:dd:ee:ff

# Minecraft RCON for the server status panel. Leave RCON_ADDRESS empty to disable.
# RCON_ADDRESS=127.0.0.1:25575
# RCON_PASSWORD=changeme

# LAN_SUBNET is swept (TCP probes) so idle devices populate the ARP table and
# show as "online". Leave empty to disable. Max /20.
# LAN_SUBNET=192.168.8.0/24

# DNS server (enable with the -dns flag). It's authoritative for the zone
# (-dns-zone, default penguins.lan): every device answers at
# <mac>.<username>.<zone> and users manage their own records from /profile.
# SERVER_IP answers the zone apex so the website itself resolves; leave empty to
# skip the apex. Queries outside the zone go to -dns-resolvers (comma-separated,
# empty = no forwarding). Real port 53 needs root or CAP_NET_BIND_SERVICE; the
# default -dns-port is 8053.
# SERVER_IP=192.168.8.1