server:
  bind_address: ":9090"
  tls:
    enabled: false
    cert_file: "cert.pem"
    key_file: "key.pem"
upstream:
  provider: hetzner
  hetzner:
    # Provide the API token directly
    # api_token: "YOUR_HETZNER_API_TOKEN"
    # OR provide the path to a file containing the token
    api_token_file: "/path/to/your/hetzner_token.txt"
clients:
  client1:
    # The client secret must be a bcrypt hash.
    # Generate one using: go run ./cmd/updns hash-secret <your-secret>
    # Or using htpasswd: htpasswd -nbB <username> <your-secret> | cut -d: -f2
    secret_hash: "$2a$10$abcdefghijklmnopqrstuv" # Replace with your actual hash
    exact:
      - "home.example.com"
    wildcard:
      - "example.net"