DOCKER_SOCKET=/var/run/user/1000/docker.sock

SOCKET_PROXY_LISTEN_ADDR=socket-proxy:2375

# docker image tag (latest, nightly)

TAG=latest

# set timezone to get correct log timestamp

TZ=ETC/UTC

# Set GODOXY_API_JWT_SECURE=false to allow http

GODOXY_API_JWT_SECURE=true

# API JWT Configuration (common)

# generate secret with `openssl rand -base64 32`

GODOXY_API_JWT_SECRET=

# the JWT token time-to-live

# leave empty to use default (24 hours)

# format: https://pkg.go.dev/time#Duration

GODOXY_API_JWT_TOKEN_TTL=

# API/WebUI user password login credentials (optional)

# These fields are not required for OIDC authentication

GODOXY_API_USER=admin

GODOXY_API_PASSWORD=password

# OIDC Configuration (optional)

# Uncomment and configure these values to enable OIDC authentication.

#

# GODOXY_OIDC_ISSUER_URL=https://accounts.google.com

# GODOXY_OIDC_CLIENT_ID=your-client-id

# GODOXY_OIDC_CLIENT_SECRET=your-client-secret

# GODOXY_OIDC_SCOPES=openid, profile, email, groups # you may also include `offline_access` if your Idp supports it (e.g. Authentik, Pocket ID)

#

# User definitions: Uncomment and configure these values to restrict access to specific users or groups.

# These two fields act as a logical AND operator. For example, given the following membership:

# user1, group1

# user2, group1

# user3, group2

# user1, group2

# You can allow access to user3 AND all users of group1 by providing:

# # GODOXY_OIDC_ALLOWED_USERS=user3

# # GODOXY_OIDC_ALLOWED_GROUPS=group1

#

# Comma-separated list of allowed users.

# GODOXY_OIDC_ALLOWED_USERS=user1,user2

# Optional: Comma-separated list of allowed groups.

# GODOXY_OIDC_ALLOWED_GROUPS=group1,group2

# Enable HTTP3

GODOXY_HTTP3_ENABLED=true

# Metrics

GODOXY_METRICS_DISABLE_CPU=false

GODOXY_METRICS_DISABLE_MEMORY=false

GODOXY_METRICS_DISABLE_DISK=false

GODOXY_METRICS_DISABLE_NETWORK=false

GODOXY_METRICS_DISABLE_SENSORS=false

# Frontend aliases (subdomains / FQDNs, e.g. godoxy, godoxy.domain.com)

GODOXY_FRONTEND_ALIASES=godoxy

# Debug mode

GODOXY_DEBUG=false