server:
  listenAddress: ":80"
  exposedAddress: "https://birdy.greact.online:443"
  stunPorts:
    - 3478
  logLevel: "info"
  logFile: "console"
  authSecret: "336c2d76-3d00-4863-abc5-afe55211a36a"
  dataDir: "/var/lib/netbird"

  auth:                                          # ← вложено под server
    issuer: "https://birdy.greact.online/oauth2"
    localAuthDisabled: false
    signKeyRefreshEnabled: true
    dashboardRedirectURIs:
      - "https://birdy.greact.online/nb-auth"
      - "https://birdy.greact.online/nb-silent-auth"
    cliRedirectURIs:
      - "http://localhost:53000/"

  reverseProxy:
    trustedHTTPProxies:
      - "172.16.0.0/12"  # Docker-подсеть (покрывает NPM-контейнер в сети proxy)

  store:                                         # ← вложено под server
    engine: "sqlite"
    encryptionKey: "336c2d76-3d00-4863-abc5-afe55211a36a"