# Copy to .env next to docker-compose.yml (gitignored); docker compose picks
# it up automatically. Same convention as services/fleet-prometheus,
# services/llm-gateway, services/ollama.

# Tailscale IP of the VPS node. The operator-ui port (18180) is published as
# ${TAILSCALE_BIND_IP}:18180:8080 so the mesh-facing bind is never 0.0.0.0.
# Verify when rebuilding the host: tailscale ip -4.
#
# WARNING (same footgun as fleet-prometheus, see its README): if .env is
# missing at deploy time, Compose resolves this to an empty string and
# SILENTLY binds to 0.0.0.0 instead of failing — always confirm with
# `docker compose config | grep host_ip` before `up -d`.
TAILSCALE_BIND_IP=100.95.58.48