1- PORT = 3000
2- ADDRESS = 0.0.0.0
3- APP_URL = http://localhost:3000
4- USERS = your_user_password_hash
5- USERS_FILE = users_file
6- SECURE_COOKIE = false
7- OAUTH_WHITELIST =
8- GENERIC_NAME = My OAuth
9- SESSION_EXPIRY = 7200
10- LOGIN_TIMEOUT = 300
11- LOGIN_MAX_RETRIES = 5
12- LOG_LEVEL = debug
13- APP_TITLE = Tinyauth SSO
14- FORGOT_PASSWORD_MESSAGE = Some message about resetting the password
15- OAUTH_AUTO_REDIRECT = none
16- BACKGROUND_IMAGE = some_image_url
17- GENERIC_SKIP_SSL = false
18- RESOURCES_DIR = /data/resources
19- DATABASE_PATH = /data/tinyauth.db
20- DISABLE_ANALYTICS = false
21- DISABLE_RESOURCES = false
22- TRUSTED_PROXIES =
1+ # Base Configuration
2+
3+ # The base URL where Tinyauth is accessible
4+ TINYAUTH_APPURL = " https://auth.example.com"
5+ # Log level: trace, debug, info, warn, error
6+ TINYAUTH_LOGLEVEL = " info"
7+ # Directory for static resources
8+ TINYAUTH_RESOURCESDIR = " /data/resources"
9+ # Path to SQLite database file
10+ TINYAUTH_DATABASEPATH = " /data/tinyauth.db"
11+ # Disable version heartbeat
12+ TINYAUTH_DISABLEANALYTICS = " false"
13+ # Disable static resource serving
14+ TINYAUTH_DISABLERESOURCES = " false"
15+ # Disable UI warning messages
16+ TINYAUTH_DISABLEUIWARNINGS = " false"
17+ # Enable JSON formatted logs
18+ TINYAUTH_LOGJSON = " false"
19+
20+ # Server Configuration
21+
22+ # Port to listen on
23+ TINYAUTH_SERVER_PORT = " 3000"
24+ # Interface to bind to (0.0.0.0 for all interfaces)
25+ TINYAUTH_SERVER_ADDRESS = " 0.0.0.0"
26+ # Unix socket path (optional, overrides port/address if set)
27+ TINYAUTH_SERVER_SOCKETPATH = " "
28+ # Comma-separated list of trusted proxy IPs/CIDRs
29+ TINYAUTH_SERVER_TRUSTEDPROXIES = " "
30+
31+ # Authentication Configuration
32+
33+ # Format: username:bcrypt_hash (use bcrypt to generate hash)
34+ TINYAUTH_AUTH_USERS = " admin:$2a$10$example_bcrypt_hash_here "
35+ # Path to external users file (optional)
36+ TINYAUTH_USERSFILE = " "
37+ # Enable secure cookies (requires HTTPS)
38+ TINYAUTH_SECURECOOKIE = " true"
39+ # Session expiry in seconds (7200 = 2 hours)
40+ TINYAUTH_SESSIONEXPIRY = " 7200"
41+ # Login timeout in seconds (300 = 5 minutes)
42+ TINYAUTH_LOGINTIMEOUT = " 300"
43+ # Maximum login retries before lockout
44+ TINYAUTH_LOGINMAXRETRIES = " 5"
45+
46+ # OAuth Configuration
47+
48+ # Regex pattern for allowed email addresses (e.g., /@example\.com$/)
49+ TINYAUTH_OAUTH_WHITELIST = " "
50+ # Provider ID to auto-redirect to (skips login page)
51+ TINYAUTH_OAUTH_AUTOREDIRECT = " "
52+ # OAuth Provider Configuration (replace MYPROVIDER with your provider name)
53+ TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_CLIENTID = " your_client_id_here"
54+ TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_CLIENTSECRET = " your_client_secret_here"
55+ TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_AUTHURL = " https://provider.example.com/oauth/authorize"
56+ TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_TOKENURL = " https://provider.example.com/oauth/token"
57+ TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_USERINFOURL = " https://provider.example.com/oauth/userinfo"
58+ TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_REDIRECTURL = " https://auth.example.com/oauth/callback/myprovider"
59+ TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_SCOPES = " openid email profile"
60+ TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_NAME = " My OAuth Provider"
61+ # Allow self-signed certificates
62+ TINYAUTH_OAUTH_PROVIDERS_MYPROVIDER_INSECURE = " false"
63+
64+ # UI Customization
65+
66+ # Custom title for login page
67+ TINYAUTH_UI_TITLE = " Tinyauth"
68+ # Message shown on forgot password page
69+ TINYAUTH_UI_FORGOTPASSWORDMESSAGE = " Contact your administrator to reset your password"
70+ # Background image URL for login page
71+ TINYAUTH_UI_BACKGROUNDIMAGE = " "
72+
73+ # LDAP Configuration
74+
75+ # LDAP server address
76+ TINYAUTH_LDAP_ADDRESS = " ldap://ldap.example.com:389"
77+ # DN for binding to LDAP server
78+ TINYAUTH_LDAP_BINDDN = " cn=readonly,dc=example,dc=com"
79+ # Password for bind DN
80+ TINYAUTH_LDAP_BINDPASSWORD = " your_bind_password"
81+ # Base DN for user searches
82+ TINYAUTH_LDAP_BASEDN = " dc=example,dc=com"
83+ # Search filter (%s will be replaced with username)
84+ TINYAUTH_LDAP_SEARCHFILTER = " (&(uid=%s)(memberOf=cn=users,ou=groups,dc=example,dc=com))"
85+ # Allow insecure LDAP connections
86+ TINYAUTH_LDAP_INSECURE = " false"
0 commit comments