.env.example

# Container name (used for Docker container and Tailscale hostname)
CONTAINER_NAME="cobalt-strike-server"

# Required values (must be non-empty)
COBALTSTRIKE_LICENSE="replace-with-license-key"
TEAMSERVER_PASSWORD="replace-with-teamserver-password"

# Optional REST API settings
REST_API_USER="csrestapi"
REST_API_PUBLISH_PORT="50443"
REST_API_PUBLISH_BIND="127.0.0.1"
# Host IP to bind C2 listener ports 80/443/53 to.
# Set to 127.0.0.1 when other services (e.g. tailscaled) already hold
# those ports on the wildcard. Use the external NIC IP for live engagements.
COBALT_LISTENER_BIND_HOST="0.0.0.0"
SERVICE_BIND_HOST="0.0.0.0"
SERVICE_PORT="50443"
UPSTREAM_HOST="127.0.0.1"
UPSTREAM_PORT="50050"
HEALTHCHECK_URL="https://127.0.0.1:50443/health"
HEALTHCHECK_INSECURE="true"

# Optional Tailscale settings
TS_AUTHKEY=""
TS_API_KEY=""
TS_EXTRA_ARGS=""
TS_USERSPACE="false"
USE_TAILSCALE_IP="false"

# Optional host/runtime target override (use if auto host detection fails)
TEAMSERVER_HOST_OVERRIDE=""