.env.example

# Optional services
# COMPOSE_PROFILES selects which optional containers `docker compose up`
# brings up, on top of the base set (net-init, ap, lan). Comma-separated.
#
# Available:
#   mitm   transparent HTTP/HTTPS interception via mitmproxy. Also requires
#          MITM_ENABLED=true so net-init installs the iptables redirect.
#
# Example: COMPOSE_PROFILES=mitm
COMPOSE_PROFILES=

# Network interfaces
BR_IFACE=br0
WAN_IFACE=eth0
WIFI_IFACE=wlan0
# Optional wired interface for devices with RJ45. Joins the same bridge as
# the wifi AP, putting wired and wireless clients on one LAN. Leave empty for
# wifi-only. Must differ from WAN_IFACE.
LAN_IFACE=

# Wifi
WIFI_SSID=MezzLab
WIFI_PASSWORD=floor-one-and-a-half
WIFI_COUNTRY_CODE=US
WIFI_HW_MODE=g
WIFI_CHANNEL=1

# LAN
LAN_IP=10.15.0.1
LAN_NETMASK=255.255.255.0
LAN_DHCP_START=10.15.0.10
LAN_DHCP_END=10.15.0.100
LAN_DNS_UPSTREAM=1.1.1.1
LAN_DOMAIN=mezz.lab

# mitm (active when COMPOSE_PROFILES contains "mitm")
# MITM_ENABLED=true makes net-init install the LAN tcp/{80,443} -> mitmproxy
# iptables redirect. Without it the container runs but no traffic reaches it.
MITM_ENABLED=false
MITM_PORT=8080
MITM_WEB_PORT=8081
# Static password for the mitmweb UI. Empty falls back to the random token
# mitmweb prints to its logs on startup.
MITM_WEB_PASSWORD=