53 lines
1.6 KiB
Bash
53 lines
1.6 KiB
Bash
# Optional backend logging level.
|
|
LOG_LEVEL=INFO
|
|
|
|
# Optional SMTP settings for the Users -> message popup.
|
|
SMTP_HOST=smtp.example.com
|
|
SMTP_PORT=587
|
|
SMTP_USERNAME=your-smtp-username
|
|
SMTP_PASSWORD=your-smtp-password
|
|
SMTP_FROM_ADDRESS=no-reply@example.com
|
|
SMTP_FROM_NAME=Manage
|
|
SMTP_USE_TLS=true
|
|
SMTP_USE_SSL=false
|
|
SMTP_TIMEOUT=30
|
|
|
|
# Machine/service configuration now lives in the app's Settings tab.
|
|
# The built-in local machine is seeded automatically.
|
|
#
|
|
# For a remote SSH machine, the backend still needs access to a private key
|
|
# file. Compose mounts a single host key file as a Docker secret instead of the
|
|
# whole ~/.ssh directory.
|
|
#
|
|
# Host-side path used by Docker Compose secret definitions:
|
|
SSH_KEY_HOST_PATH=/absolute/path/to/id_ed25519
|
|
# The container-side path is fixed by the app and Compose at:
|
|
# /run/secrets/ssh_private_key
|
|
|
|
# For deployment with traefik
|
|
FRONTEND_APP_NAME=manage
|
|
FRONTEND_APP_HOST=manage.example.com
|
|
FRONTEND_APP_PORT=5173
|
|
|
|
BACKEND_APP_NAME=management-api
|
|
BACKEND_APP_HOST=management-api.example.com
|
|
BACKEND_APP_PORT=8000
|
|
|
|
CERT_RESOLVER=lets-encrypt
|
|
|
|
# Authentik / OIDC
|
|
# Backend validates every API request with a Bearer JWT.
|
|
AUTH_ENABLED=true
|
|
OIDC_ISSUER_URL=https://authentik.example/application/o/media-library-viewer/
|
|
OIDC_AUDIENCE=media-library-viewer
|
|
OIDC_JWKS_URL=
|
|
OIDC_CLOCK_SKEW_SECONDS=30
|
|
|
|
# Frontend OIDC settings (Vite build/runtime env)
|
|
VITE_OIDC_ENABLED=true
|
|
VITE_OIDC_ISSUER=https://authentik.example/application/o/media-library-viewer/
|
|
VITE_OIDC_CLIENT_ID=media-library-viewer
|
|
VITE_OIDC_SCOPE=openid profile email
|
|
VITE_OIDC_REDIRECT_URI=http://localhost:8080/
|
|
VITE_OIDC_POST_LOGOUT_REDIRECT_URI=http://localhost:8080/
|