.env.sample

@@ -25,3 +25,5 @@ ENABLE_DERP=false
 # See https://git.coopcloud.tech/coop-cloud/backup-bot-two
 ENABLE_BACKUPS=true
 
+# The amount of time a node is authenticated, default is set to 7d
+#EXPIRY=0

abra.sh

@@ -1,3 +1,3 @@
 # Set any config versions here
 # Docs: https://docs.coopcloud.tech/maintainers/handbook/#manage-configs
-export CONFIG_YAML_VERSION=v4
+export CONFIG_YAML_VERSION=v5

compose.yml

@@ -8,6 +8,8 @@ services:
     volumes:
       # - config:/etc/headscale
       - data:/var/lib/headscale
+    environment:
+      EXPIRY: ${EXPIRY:-7d}
     configs:
       - source: config_yaml
         target: /etc/headscale/config.yaml

config.yaml.tmpl

@@ -348,7 +348,7 @@ oidc:
   # The amount of time a node is authenticated with OpenID until it expires
   # and needs to reauthenticate.
   # Setting the value to "0" will mean no expiry.
-  expiry: 7d
+  expiry: {{ env "EXPIRY" }}
 
   # Use the expiry from the token received from OpenID when the user logged
   # in. This will typically lead to frequent need to reauthenticate and should