wrapper_server.env.example

# Vultra VPN Server - environment for systemd
# Copy to /etc/default/vultra-vpn-server and set values.
#
# Generate key: openssl rand -hex 32
# WRAPPER_SERVER is the public hostname/IP clients use to connect (for add-client.sh).
# PREMIUM_VERIFY_URL: premium verification API (wrapper calls it to check device/expiry). Example: https://verify.example.com/verify
# PREMIUM_VERIFY_API_KEY: optional Bearer token for API auth.
#
# Server mode (two kinds of wrapper server):
#   WRAPPER_SERVER_MODE=free    - Accept all (free and premium users).
#   WRAPPER_SERVER_MODE=premium - Premium-only: only allow connections that pass verification; free users rejected. Requires PREMIUM_VERIFY_URL.
#   If unset: free when PREMIUM_VERIFY_URL is empty, premium when PREMIUM_VERIFY_URL is set.

WRAPPER_SERVER=your-server.example.com
WRAPPER_BASE_PORT=78
WRAPPER_NUM_PORTS=100
WG_SERVER=127.0.0.1
WG_PORT=51820
# WRAPPER_LOG=1 enables verbose logs (DATA path, WG routing, etc.). Critical events (startup, AUTH, AUTH_RESP, drops, errors) are always logged even when WRAPPER_LOG is unset.
# WRAPPER_LOG_FILE: optional path to append all logs (stderr). Example: /run/vultra-vpn-server/server.log or /var/log/vultra-vpn-server.log
WRAPPER_LOG=1
#WRAPPER_LOG_FILE=/run/vultra-vpn-server/server.log
WRAPPER_KEY_HEX=0000000000000000000000000000000000000000000000000000000000000000
# Free server: leave below commented, or set WRAPPER_SERVER_MODE=free
# Premium-only server: set WRAPPER_SERVER_MODE=premium and PREMIUM_VERIFY_URL (and optional PREMIUM_VERIFY_API_KEY)
# WRAPPER_SERVER_MODE=premium
# PREMIUM_VERIFY_URL=https://your-verify-server/verify
# PREMIUM_VERIFY_API_KEY=your-secret-key