working ig

.env.example

@@ -32,6 +32,10 @@ RADIUS_SECRET=
 # Applied on FIRST start only; change later via the console itself.
 TECHNITIUM_ADMIN_PASSWORD=
 
+# ── DNS zone for VPN client registration (A + PTR via learn-address) ──
+# Leave empty to disable client DNS registration entirely.
+VPN_DNS_ZONE=roam.atlashorizon.net
+
 # ── Optional (defaults shown) ─────────────────────────────────────────
 # Duo Auth Proxy version; pin (e.g. 6.5.1) for deterministic updates
 #DUO_AUTHPROXY_VERSION=latest