publicBaseUrl

publicBaseUrl

publicBaseUrl is the public-facing base URL of the Wawel Auth HTTP server.

It is the origin that clients and browsers should use to reach Wawel Auth. In a typical setup, this is the same host and port as the game server. publicBaseUrl without a scheme is normalized to http://.... publicBaseUrl can be an IP address.

Example: play.example.com:25565

The following variables are appended to it, in order to expose different services:

• apiRoot: API paths used by the Yggdrasil protocol.
• publicPagePath: Public website of the server.
• publicInfoApiPath: URL that exposes live information for the public website (like the player count).

The admin web UI is mounted at /admin.

For login, use the HTTPS form of the same host and port:

• https://your-host:your-port/admin

If publicBaseUrl uses plain HTTP, <publicBaseUrl>/admin can still load the UI and bootstrap/status data, but admin login requires HTTPS.

Tip

When publicBaseUrl is configured, Wawel Auth automatically adds the host from the effective API root to skinDomains at runtime.

Tip

Use http://localhost:25565 for a local testing setup.

Note

Same-port HTTPS works with IP-only hosts too. The certificate is self-signed, so verify its SHA-256 fingerprint when accepting the browser warning.

Note

For CI smoke tests only (GT:NH buildscript CI), missing publicBaseUrl is bypassed when WAWELAUTH_CI or GITHUB_ACTIONS is truthy.