Settings
Control plane configuration
API connection
The dashboard connects to the FastAPI control plane via the Next.js proxy at /api/*. Set these env vars on the Vercel project:
CONTROL_PLANE_URLhttp://<tailscale-ip>:8080
CONTROL_PLANE_API_KEYfrom MASTER_API_KEYS.env
Security notes
- API key is added server-side by the Next.js rewrite. Never reaches the browser.
- API binds to 127.0.0.1 by default. Expose only over Tailscale.
- Destroy ops require a 5-minute HMAC token fetched server-to-server.
- Never commit customers/*.env or registry.json to git.