# RustProxy administration endpoint reachable from OPNsense.
RUSTPROXY_URL='https://rustproxy.example.lan:9090'

# Certificate API credential created in RustProxy Settings -> Certificate API.
# The credential must allow this CERTIFICATE_ID and have deploy permission enabled.
RUSTPROXY_KEY_ID='opnsense-acme'
RUSTPROXY_TOKEN='REPLACE_WITH_CERTIFICATE_API_TOKEN'

# Stable RustProxy certificate id to create/update.
CERTIFICATE_ID='shared-cert'

# os-acme-client certificate material. Replace CERT_UUID with the actual UUID.
CERT_FILE='/var/etc/acme-client/certs/CERT_UUID/fullchain.pem'
KEY_FILE='/var/etc/acme-client/keys/CERT_UUID/private.key'

# Optional: trust a private CA used by the RustProxy administration listener.
# RUSTPROXY_CACERT='/usr/local/etc/ssl/rustproxy-ca.pem'

# Optional: connect to a fixed address while keeping TLS verification for the URL hostname.
# Format: hostname:port:address
# RUSTPROXY_RESOLVE='rustproxy.example.lan:9090:192.0.2.20'