.env

# VPN Gateway Configuration
# Deployed to /etc/splitgate/vpn-gateway.env on RPi by deploy.sh
# Safe to commit — no secrets, only network config
# VPN_SERVER_IP is in .env.secrets (gitignored) — deploy.sh merges it at deploy time

# ── macOS deploy-side only (not used on RPi) ──────────────────────────────────
SSH_HOST="pi4"

# ── RPi network config (deployed to /etc/splitgate/vpn-gateway.env) ──────────
RPI_LAN_IP=192.168.1.254
LAN_SUBNET=192.168.1.0/24
KEENETIC_GW=192.168.1.1
VPN_IFACE=awg0
RU_SUBNET_URL="https://russia.iplist.opencck.org/?format=text&data=cidr4"

# Daily cron schedule for /etc/update-vpn-routes (hour of day, 0-23); D-05
CRON_UPDATE_HOUR=5

ADMIN_PORT=8080