# Template for .env.local — copy to .env.local and fill in real values. # .env.local is gitignored; this file documents what must be in it. # TSIG shared secret for rfc2136 plugin + caddy-dns/rfc2136. # Generate with: openssl rand -base64 32 # Rotate by regenerating + restarting CoreDNS + Caddy. ACME_TSIG_SECRET=