ServerCommander/.env.example at main · TTH-Projects/ServerCommander · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
# ─────────────────────────────────────────────
# ServerCommander OS — Environment Configuration
# Generated by setup.sh — DO NOT EDIT MANUALLY
# ─────────────────────────────────────────────

# Application
NODE_ENV=production
NEXT_PUBLIC_APP_NAME="ServerCommander OS"
NEXT_PUBLIC_APP_VERSION="1.0.0"
PORT=3000
HOST_PORT=3000

# Security — replace with long random strings (setup.sh generates these)
SESSION_SECRET=REPLACE_WITH_64_CHAR_SECRET
JWT_SECRET=REPLACE_WITH_64_CHAR_SECRET
INTERNAL_RPC_SECRET=REPLACE_WITH_64_CHAR_SECRET
ENCRYPTION_KEY=REPLACE_WITH_64_CHAR_HEX_KEY

# Database (SQLite — path inside the container)
DATABASE_URL="file:/app/data/servercommander.db"

# Initial admin (used only during first-run seed)
ADMIN_USERNAME=admin
# Encrypted format (iv_hex:cipher_hex:tag_hex), decrypted at seed/runtime via ENCRYPTION_KEY
ADMIN_PASSWORD_ENC=REPLACE_WITH_ENCRYPTED_ADMIN_PASSWORD

# Docker daemon endpoint for dockerode
# Production (docker-compose): use the socket proxy service
DOCKER_HOST=tcp://docker-socket-proxy:2375
# Development / direct access (no compose): use the local Unix socket instead
# DOCKER_HOST=unix:///var/run/docker.sock

# Host filesystem mount point inside the container
HOST_FS_MOUNT=/host_system
# Host source directory mounted into HOST_FS_MOUNT via docker-compose
HOST_FS_SOURCE=/srv/servercommander

# Comma-separated proxy IPs that are trusted to set X-Forwarded-For
TRUSTED_PROXIES=

# Remote host access for terminal/files (optional)
# Set SSH_ENABLED=true to use SSH/SFTP backend instead of local host mount.
SSH_ENABLED=false
SSH_HOST=127.0.0.1
SSH_PORT=22
SSH_USERNAME=root
# Encrypted format (iv_hex:cipher_hex:tag_hex), decrypted at runtime via ENCRYPTION_KEY
SSH_PASSWORD_ENC=REPLACE_WITH_ENCRYPTED_SSH_PASSWORD
SSH_PRIVATE_KEY_ENC=
SSH_KEY_PASSPHRASE_ENC=
SSH_HOST_KEY_SHA256=
SSH_SFTP_ROOT=/

# SMTP / mail delivery (optional)
SMTP_ENABLED=false
SMTP_HOST=smtp.example.com
SMTP_PORT=587
SMTP_SECURE=false
SMTP_USERNAME=smtp-user@example.com
SMTP_PASSWORD_ENC=REPLACE_WITH_ENCRYPTED_SMTP_PASSWORD
SMTP_FROM_EMAIL=noreply@example.com
SMTP_USE_ALIAS=true
SMTP_FROM_NAME="ServerCommander Security"

# Session expiry in seconds (default 8 hours)
SESSION_MAX_AGE=28800

# Set to true only behind HTTPS reverse proxy
COOKIE_SECURE=true