Files
Piik/.env.example
T

56 lines
2.5 KiB
Bash

# Application
# Use 127.0.0.1 instead when only a same-host reverse proxy should connect.
LISTEN_HOST=0.0.0.0
PORT=8787
# For LAN viewers, replace localhost with this computer's LAN address.
PUBLIC_BASE_URL=http://localhost:8787
# Include both the host browser origin and PUBLIC_BASE_URL when they differ.
ALLOWED_ORIGINS=http://localhost:8787
# Optional whole-site gate. A non-empty value must contain 1-128 visible ASCII
# characters (0x21-0x7e). When set, every browser signs in before sharing or watching.
ACCESS_PASSWORD=
# Optional SQLite file for persistent protected rooms. Requires ACCESS_PASSWORD.
# The systemd example creates /var/lib/screener for this production path.
ROOM_DATABASE_PATH=
# Applies only to temporary rooms when ROOM_DATABASE_PATH is empty.
ROOM_TTL_SECONDS=14400
MAX_ROOMS=1000
MAX_VIEWERS_PER_ROOM=8
# Experimental standard-WebRTC relay chains. Keep false outside measured tests.
PEER_ASSISTED_MEDIA=false
# Optional exact-room canary when peer assistance is true. Use comma-separated
# positive numeric room IDs. Missing or empty means every room for compatibility.
PEER_ASSISTED_ROOM_IDS=
# Optional automatic SFU fallback capacity. Set PEER_ASSISTED_MEDIA=true and
# supply all three values together; leaving them empty keeps LiveKit completely
# dormant. Production requires wss and an independent API secret of 32+ bytes.
LIVEKIT_URL=
LIVEKIT_API_KEY=
LIVEKIT_API_SECRET=
# Effective only when the complete LiveKit tuple is configured. Valid range: 1-2.
MAX_SFU_ROOTS_PER_ROOM=2
# ICE servers. Separate multiple URLs with commas.
STUN_URLS=
TURN_URLS=
TURN_SHARED_SECRET=
TURN_CREDENTIAL_TTL_SECONDS=3600
# Minimal production example (use independent untracked secrets):
# ACCESS_PASSWORD=replace-with-a-strong-passphrase
# ROOM_DATABASE_PATH=/var/lib/screener/rooms.sqlite
# STUN_URLS=stun:turn.example.com:3478
# TURN_URLS=turn:turn.example.com:3478?transport=udp,turn:turn.example.com:3478?transport=tcp
# TURN_SHARED_SECRET=replace-with-at-least-32-random-bytes
# Optional automatic SFU fallback (requires PEER_ASSISTED_MEDIA=true and does
# not replace STUN/TURN above):
# PEER_ASSISTED_ROOM_IDS=1
# LIVEKIT_URL=wss://share.example.com
# LIVEKIT_API_KEY=replace-with-a-livekit-api-key
# LIVEKIT_API_SECRET=replace-with-at-least-32-independent-random-bytes
# MAX_SFU_ROOTS_PER_ROOM=2
# Optional TURN/TLS (standard port; append to TURN_URLS when configured):
# turns:turn.example.com:5349?transport=tcp
# Port 443 is an optional restrictive-network enhancement, not the default.