# ── UniFi Controller (required) ────────────────────────────────────────────────
UNIFI_URL=https://192.168.1.1
UNIFI_API_KEY=your_api_key_here
UNIFI_SITE=default
UNIFI_VERIFY_SSL=false        # false for self-signed cert (typical for UDR)

# ── GeoIP database (required) ──────────────────────────────────────────────────
# Download free from https://www.maxmind.com/en/geolite2/signup
GEOIP_DB_PATH=/data/GeoLite2-City.mmdb

# ── NetFlow/IPFIX (required) ───────────────────────────────────────────────────
# Must match the collector port set in UniFi → Settings → CyberSecure → NetFlow
NETFLOW_PORT=2055

# ── Home location ──────────────────────────────────────────────────────────────
HOME_LAT=59.9139
HOME_LON=10.7522
HOME_NAME=Home

# ── CrowdSec (optional) ────────────────────────────────────────────────────────
# Leave blank to disable CrowdSec integration entirely.
# All ban markers, toggles, and counters will be hidden from the UI.
# To enable: run on your CrowdSec host:
#   sudo cscli bouncers add netmap-reader
# Then fill in the values below:
CROWDSEC_URL=
CROWDSEC_API_KEY=