dashboard.env

NETBIRD_MGMT_API_ENDPOINT=https://netbird.apps.my.site
NETBIRD_MGMT_GRPC_API=https://netbird.apps.my.site
AUTH_AUDIENCE=netbird
AUTH_CLIENT_ID=netbirdclientid
AUTH_CLIENT_SECRET=secret
AUTH_AUTHORITY=https://auth.raku.party
USE_AUTH0=false
AUTH_SUPPORTED_SCOPES=openid email profile offline_access
AUTH_REDIRECT_URI=/peers
AUTH_SILENT_REDIRECT_URI=/add-peers
NETBIRD_TOKEN_SOURCE=idToken

management.json

{
    "Stuns": [
        {
            "Proto": "udp",
            "URI": "stun:netbird.apps.my.site:3479",
            "Username": "",
            "Password": ""
        }
    ],
    "TURNConfig": null,
    "Relay": {
        "Addresses": [
            "rels://netbird.apps.my.site:443"
        ],
        "CredentialsTTL": "24h0m0s",
        "Secret": "secret"
    },
    "Signal": {
        "Proto": "https",
        "URI": "netbird.apps.my.site:443",
        "Username": "",
        "Password": ""
    },
    "Datadir": "/var/lib/netbird/",
    "DataStoreEncryptionKey": "key",
    "HttpConfig": {
        "AuthIssuer": "https://auth.raku.party",
        "AuthAudience": "netbird",
        "AuthKeysLocation": "https://auth.raku.party/jwks.json",
        "AuthUserIDClaim": "",
        "CertFile": "",
        "CertKey": "",
        "IdpSignKeyRefreshEnabled": true,
        "OIDCConfigEndpoint": "https://auth.raku.party/.well-known/openid-configuration"
    },
    "IdpManagerConfig": {},
    "DeviceAuthorizationFlow": {
      "Provider": "hosted",
      "ProviderConfig": {
        "Audience": "netbird",
        "ClientID": "netbirdclientid",
        "DeviceAuthEndpoint": "https://auth.raku.party/api/oidc/device-authorization",
        "Domain": null,
        "Scope": "openid profile email offline_access",
        "TokenEndpoint": "https://auth.raku.party/api/oidc/token",
        "UseIDToken": true
      }
    },
    "PKCEAuthorizationFlow": {
        "ProviderConfig": {
            "Audience": "netbird",
            "ClientID": "netbirdclientid"
            "ClientSecret": "",
            "Domain": "",
            "AuthorizationEndpoint": "https://auth.raku.party/api/oidc/authorization",
            "TokenEndpoint": "https://auth.raku.party/api/oidc/token",
            "Scope": "openid email profile offline_access",
            "RedirectURLs": [
                "http://localhost:53000",
                "https://netbird.apps.my.site/peers",
                "https://netbird.apps.my.site/add-peers"
            ],
            "UseIDToken": true
        }
    },
    "StoreConfig": {
        "Engine": ""
    },
    "ReverseProxy": {
        "TrustedHTTPProxies": null,
        "TrustedHTTPProxiesCount": 0,
        "TrustedPeers": null
    },
    "DisableDefaultPolicy": false,
    "EmbeddedIdP": null
}

relay.env

# Log level: debug, info, warn, error
NB_LOG_LEVEL=info

# Address to listen on for relay connections
NB_LISTEN_ADDRESS=:80

# Public address for peers to connect
# Use rel:// for unencrypted or rels:// for TLS
NB_EXPOSED_ADDRESS=rels://netbird.apps.my.site:443

# Authentication secret (must match management.json Relay.Secret)
NB_AUTH_SECRET=secret

# Embedded STUN server configuration
NB_ENABLE_STUN=true
NB_STUN_LOG_LEVEL=info
NB_STUN_PORTS=3479