47 lines
1.4 KiB
Bash
47 lines
1.4 KiB
Bash
# Optional backend logging level.
|
|
LOG_LEVEL=INFO
|
|
|
|
# Optional SMTP settings for the Users -> message popup.
|
|
SMTP_HOST=smtp.example.com
|
|
SMTP_PORT=587
|
|
SMTP_USERNAME=your-smtp-username
|
|
SMTP_PASSWORD=your-smtp-password
|
|
SMTP_FROM_ADDRESS=no-reply@example.com
|
|
SMTP_FROM_NAME=Manage
|
|
SMTP_USE_TLS=true
|
|
SMTP_USE_SSL=false
|
|
SMTP_TIMEOUT=30
|
|
|
|
# Machine/service configuration now lives in the app's Settings tab.
|
|
# The built-in local machine is seeded automatically.
|
|
#
|
|
# Remote SSH machines can store their private key and optional passphrase directly in Settings,
|
|
# so no SSH key mount is required for normal use.
|
|
|
|
# For deployment with traefik
|
|
FRONTEND_APP_NAME=manage
|
|
FRONTEND_APP_HOST=manage.example.com
|
|
FRONTEND_APP_PORT=5173
|
|
|
|
BACKEND_APP_NAME=management-api
|
|
BACKEND_APP_HOST=management-api.example.com
|
|
BACKEND_APP_PORT=8000
|
|
|
|
CERT_RESOLVER=lets-encrypt
|
|
|
|
# Authentik / OIDC
|
|
# Backend validates every API request with a Bearer JWT.
|
|
AUTH_ENABLED=true
|
|
OIDC_ISSUER_URL=https://authentik.example/application/o/media-library-viewer/
|
|
OIDC_AUDIENCE=media-library-viewer
|
|
OIDC_JWKS_URL=
|
|
OIDC_CLOCK_SKEW_SECONDS=30
|
|
|
|
# Frontend OIDC settings (Vite build/runtime env)
|
|
VITE_OIDC_ENABLED=true
|
|
VITE_OIDC_ISSUER=https://authentik.example/application/o/media-library-viewer/
|
|
VITE_OIDC_CLIENT_ID=media-library-viewer
|
|
VITE_OIDC_SCOPE=openid profile email
|
|
VITE_OIDC_REDIRECT_URI=http://localhost:8080/
|
|
VITE_OIDC_POST_LOGOUT_REDIRECT_URI=http://localhost:8080/
|