working ig

ansible/group_vars/vpnhub.example.yml

@@ -34,6 +34,11 @@ radius_secret: ""
 # console (this var must still match for the init job's API login).
 technitium_admin_password: ""
 
+# DNS zone where VPN clients get registered as <username>.<zone> with a
+# matching PTR (Technitium primary zone, created by the init job). Set to
+# "" to disable registration.
+vpn_dns_zone: roam.atlashorizon.net
+
 # ── Optional ──
 # Pin for deterministic Duo updates (e.g. "6.5.1"); bumping it forces a
 # refetch of the tarball on the next rebuild.