proxy-config-reference

Generated by labby docs generate. Do not edit by hand.

Values are non-secret unless marked otherwise. Literal bearer tokens belong in the environment file, never TOML.

TOML path	Type	Default	Secret	Environment override	Description
proxy.exposure	tailscale|local	tailscale	false	-	Publication controller
proxy.auth	tailnet|bearer|oauth|none	tailnet	false	-	Authentication policy
proxy.path	absolute non-root path	/mcp	false	-	Public MCP endpoint path
proxy.port	random|u16	random	false	-	External Tailscale HTTPS port selection
proxy.port_range_start	u16	49152	false	-	First random external-port candidate
proxy.port_range_end	u16	65535	false	-	Last random external-port candidate
proxy.bearer_token_env	environment variable name	LABBY_PROXY_BEARER_TOKEN	false	LABBY_PROXY_BEARER_TOKEN	Environment key containing the static bearer secret
proxy.oauth_scopes	string[]	[mcp:read, mcp:write]	false	-	Scopes required by the exact OAuth resource lease
proxy.inherit_env	environment variable name[]	[]	false	-	Additional ambient variables inherited by the scrubbed child
proxy.shutdown_grace_ms	u64 (1..=60000)	3000	false	-	Grace period preference for supervised shutdown