# Copy to .env and edit, then: docker compose up -d step-ca CA_DNS=ca.fleet.lab # DNS name(s) clients reach step-ca on (resolved by serving dnsmasq) CA_PORT=8443 # step-ca listen port (host networking) CA_PASSWORD=changeme-bench # password protecting the CA keys (bench only) RADIUS_SECRET=testing123 # shared secret between the authenticator (hostapd) and FreeRADIUS