# nvimide — declarative config. Copy to .env (gitignored) and fill in.
#   cp .env.example .env

# ── Tailnet (your Tailscale OAuth client + tailnet) ──
TAILSCALE_VERSION=v1.98.4
TS_OAUTH_CLIENT_SECRET=          # OAuth client secret, authorized for tag:nvimide
TS_TAILNET=                      # e.g. your-tailnet.ts.net — used by the roaming engine for MagicDNS
NVIMIDE_MAGIC_NAME=nvimide

# ── Declarative auth (NixOS-style — nothing baked in the image) ──
NVIMIDE_USER=dev
NVIMIDE_PASSWORD=                # sets the user's password → enables sudo + ssh fallback
NVIMIDE_SSH_PUBKEY=              # your PUBLIC key (e.g. ~/.ssh/id_ed25519.pub) — the real login

# ── Build (match host uid so the home volume perms line up) ──
UID=1000
GID=1000