# Headscale configuration for integration tests.
# Ephemeral SQLite, embedded DERP, no OIDC.

server_url: https://headscale:8443
listen_addr: 0.0.0.0:8443
metrics_listen_addr: 0.0.0.0:9090

# Self-signed cert covering localhost, 127.0.0.1, and the docker-network
# hostname `headscale`. Generated by tests/run.sh on first run; the
# integration tests connect with derp_tls_insecure: true so they don't
# need to trust this CA.
tls_cert_path: /etc/headscale/test-cert.pem
tls_key_path: /etc/headscale/test-key.pem

# Noise protocol (auto-generates key on first start)
noise:
  private_key_path: /var/lib/headscale/noise_private.key

# Ephemeral SQLite
database:
  type: sqlite
  sqlite:
    path: /tmp/headscale.db

ip_prefixes:
  - 100.64.0.0/10
  - fd7a:115c:a1e0::/48

# Embedded DERP relay — clients can relay through Headscale itself
derp:
  server:
    enabled: true
    region_id: 999
    region_code: test
    region_name: "Integration Test"
    stun_listen_addr: 0.0.0.0:3478
    private_key_path: /var/lib/headscale/derp_server_private.key
  urls: []
  auto_update_enabled: false

dns:
  magic_dns: false
  base_domain: test.sunbeam.internal

prefixes:
  v4: 100.64.0.0/10
  v6: fd7a:115c:a1e0::/48
  allocation: sequential

log:
  level: warn