|
1 | 1 | # Base Configuration |
2 | 2 |
|
3 | 3 | # The base URL where Tinyauth is accessible |
4 | | -TINYAUTH_APPURL=https://auth.example.com |
| 4 | +TINYAUTH_APPURL="https://auth.example.com" |
5 | 5 | # Log level: trace, debug, info, warn, error |
6 | | -TINYAUTH_LOGLEVEL=info |
| 6 | +TINYAUTH_LOGLEVEL="info" |
7 | 7 | # Directory for static resources |
8 | | -TINYAUTH_RESOURCESDIR=/data/resources |
| 8 | +TINYAUTH_RESOURCESDIR="/data/resources" |
9 | 9 | # Path to SQLite database file |
10 | | -TINYAUTH_DATABASEPATH=/data/tinyauth.db |
| 10 | +TINYAUTH_DATABASEPATH="/data/tinyauth.db" |
11 | 11 | # Disable version heartbeat |
12 | | -TINYAUTH_DISABLEANALYTICS=false |
| 12 | +TINYAUTH_DISABLEANALYTICS="false" |
13 | 13 | # Disable static resource serving |
14 | | -TINYAUTH_DISABLERESOURCES=false |
| 14 | +TINYAUTH_DISABLERESOURCES="false" |
15 | 15 | # Disable UI warning messages |
16 | | -TINYAUTH_DISABLEUIWARNINGS=false |
| 16 | +TINYAUTH_DISABLEUIWARNINGS="false" |
17 | 17 | # Enable JSON formatted logs |
18 | | -TINYAUTH_LOGJSON=false |
| 18 | +TINYAUTH_LOGJSON="false" |
19 | 19 |
|
20 | 20 | # Server Configuration |
21 | 21 |
|
22 | 22 | # Port to listen on |
23 | | -TINYAUTH_SERVER_PORT=3000 |
| 23 | +TINYAUTH_SERVER_PORT="3000" |
24 | 24 | # Interface to bind to (0.0.0.0 for all interfaces) |
25 | | -TINYAUTH_SERVER_ADDRESS=0.0.0.0 |
| 25 | +TINYAUTH_SERVER_ADDRESS="0.0.0.0" |
26 | 26 | # Unix socket path (optional, overrides port/address if set) |
27 | | -TINYAUTH_SERVER_SOCKETPATH= |
| 27 | +TINYAUTH_SERVER_SOCKETPATH="" |
28 | 28 | # Comma-separated list of trusted proxy IPs/CIDRs |
29 | | -TINYAUTH_SERVER_TRUSTEDPROXIES= |
| 29 | +TINYAUTH_SERVER_TRUSTEDPROXIES="" |
30 | 30 |
|
31 | 31 | # Authentication Configuration |
32 | 32 |
|
33 | 33 | # Format: username:bcrypt_hash (use bcrypt to generate hash) |
34 | | -TINYAUTH_AUTH_USERS=admin:$2a$10$example_bcrypt_hash_here |
| 34 | +TINYAUTH_AUTH_USERS="admin:$2a$10$example_bcrypt_hash_here" |
35 | 35 | # Path to external users file (optional) |
36 | | -TINYAUTH_USERSFILE= |
| 36 | +TINYAUTH_USERSFILE="" |
37 | 37 | # Enable secure cookies (requires HTTPS) |
38 | | -TINYAUTH_SECURECOOKIE=true |
| 38 | +TINYAUTH_SECURECOOKIE="true" |
39 | 39 | # Session expiry in seconds (7200 = 2 hours) |
40 | | -TINYAUTH_SESSIONEXPIRY=7200 |
| 40 | +TINYAUTH_SESSIONEXPIRY="7200" |
41 | 41 | # Login timeout in seconds (300 = 5 minutes) |
42 | | -TINYAUTH_LOGINTIMEOUT=300 |
| 42 | +TINYAUTH_LOGINTIMEOUT="300" |
43 | 43 | # Maximum login retries before lockout |
44 | | -TINYAUTH_LOGINMAXRETRIES=5 |
| 44 | +TINYAUTH_LOGINMAXRETRIES="5" |
45 | 45 |
|
46 | 46 | # OAuth Configuration |
47 | 47 |
|
48 | 48 | # Regex pattern for allowed email addresses (e.g., /@example\.com$/) |
49 | | -TINYAUTH_OAUTH_WHITELIST= |
| 49 | +TINYAUTH_OAUTH_WHITELIST="" |
50 | 50 | # Provider ID to auto-redirect to (skips login page) |
51 | | -TINYAUTH_OAUTH_AUTOREDIRECT= |
| 51 | +TINYAUTH_OAUTH_AUTOREDIRECT="" |
52 | 52 | # OAuth Provider Configuration (replace MYPROVIDER with your provider name) |
53 | | -TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_CLIENTID=your_client_id_here |
54 | | -TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_CLIENTSECRET=your_client_secret_here |
55 | | -TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_AUTHURL=https://provider.example.com/oauth/authorize |
56 | | -TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_TOKENURL=https://provider.example.com/oauth/token |
57 | | -TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_USERINFOURL=https://provider.example.com/oauth/userinfo |
58 | | -TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_REDIRECTURL=https://auth.example.com/oauth/callback/myprovider |
59 | | -TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_SCOPES=openid email profile |
60 | | -TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_NAME=My OAuth Provider |
| 53 | +TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_CLIENTID="your_client_id_here" |
| 54 | +TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_CLIENTSECRET="your_client_secret_here" |
| 55 | +TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_AUTHURL="https://provider.example.com/oauth/authorize" |
| 56 | +TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_TOKENURL="https://provider.example.com/oauth/token" |
| 57 | +TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_USERINFOURL="https://provider.example.com/oauth/userinfo" |
| 58 | +TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_REDIRECTURL="https://auth.example.com/oauth/callback/myprovider" |
| 59 | +TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_SCOPES="openid email profile" |
| 60 | +TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_NAME="My OAuth Provider" |
61 | 61 | # Allow self-signed certificates |
62 | | -TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_INSECURE=false |
| 62 | +TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_INSECURE="false" |
63 | 63 |
|
64 | 64 | # UI Customization |
65 | 65 |
|
66 | 66 | # Custom title for login page |
67 | | -TINYAUTH_UI_TITLE=Tinyauth |
| 67 | +TINYAUTH_UI_TITLE="Tinyauth" |
68 | 68 | # Message shown on forgot password page |
69 | 69 | TINYAUTH_UI_FORGOTPASSWORDMESSAGE="Contact your administrator to reset your password" |
70 | 70 | # Background image URL for login page |
71 | | -TINYAUTH_UI_BACKGROUNDIMAGE= |
| 71 | +TINYAUTH_UI_BACKGROUNDIMAGE="" |
72 | 72 |
|
73 | 73 | # LDAP Configuration |
74 | 74 |
|
75 | 75 | # LDAP server address |
76 | | -TINYAUTH_LDAP_ADDRESS=ldap://ldap.example.com:389 |
| 76 | +TINYAUTH_LDAP_ADDRESS="ldap://ldap.example.com:389" |
77 | 77 | # DN for binding to LDAP server |
78 | | -TINYAUTH_LDAP_BINDDN=cn=readonly,dc=example,dc=com |
| 78 | +TINYAUTH_LDAP_BINDDN="cn=readonly,dc=example,dc=com" |
79 | 79 | # Password for bind DN |
80 | | -TINYAUTH_LDAP_BINDPASSWORD=your_bind_password |
| 80 | +TINYAUTH_LDAP_BINDPASSWORD="your_bind_password" |
81 | 81 | # Base DN for user searches |
82 | | -TINYAUTH_LDAP_BASEDN=dc=example,dc=com |
| 82 | +TINYAUTH_LDAP_BASEDN="dc=example,dc=com" |
83 | 83 | # Search filter (%s will be replaced with username) |
84 | | -TINYAUTH_LDAP_SEARCHFILTER=(&(uid=%s)(memberOf=cn=users,ou=groups,dc=example,dc=com)) |
| 84 | +TINYAUTH_LDAP_SEARCHFILTER="(&(uid=%s)(memberOf=cn=users,ou=groups,dc=example,dc=com))" |
85 | 85 | # Allow insecure LDAP connections |
86 | | -TINYAUTH_LDAP_INSECURE=false |
| 86 | +TINYAUTH_LDAP_INSECURE="false" |
0 commit comments