Files
Piik/.env.example
T

37 lines
1.6 KiB
Bash

# Application
# Use 127.0.0.1 instead when only a same-host reverse proxy should connect.
LISTEN_HOST=0.0.0.0
PORT=8787
# For LAN viewers, replace localhost with this computer's LAN address.
PUBLIC_BASE_URL=http://localhost:8787
# Include both the host browser origin and PUBLIC_BASE_URL when they differ.
ALLOWED_ORIGINS=http://localhost:8787
# Optional whole-site gate. A non-empty value must contain 1-128 visible ASCII
# characters (0x21-0x7e). When set, every browser signs in before sharing or watching.
ACCESS_PASSWORD=
# Optional SQLite file for persistent protected rooms. Requires ACCESS_PASSWORD.
# The systemd example creates /var/lib/screener for this production path.
ROOM_DATABASE_PATH=
# Applies only to temporary rooms when ROOM_DATABASE_PATH is empty.
ROOM_TTL_SECONDS=14400
MAX_ROOMS=1000
MAX_VIEWERS_PER_ROOM=8
# Experimental standard-WebRTC relay chains. Keep false outside measured tests.
PEER_ASSISTED_MEDIA=false
# ICE servers. Separate multiple URLs with commas.
STUN_URLS=
TURN_URLS=
TURN_SHARED_SECRET=
TURN_CREDENTIAL_TTL_SECONDS=3600
# Minimal production example (use independent untracked secrets):
# ACCESS_PASSWORD=replace-with-a-strong-passphrase
# ROOM_DATABASE_PATH=/var/lib/screener/rooms.sqlite
# STUN_URLS=stun:turn.example.com:3478
# TURN_URLS=turn:turn.example.com:3478?transport=udp,turn:turn.example.com:3478?transport=tcp
# TURN_SHARED_SECRET=replace-with-at-least-32-random-bytes
# Optional TURN/TLS (standard port; append to TURN_URLS when configured):
# turns:turn.example.com:5349?transport=tcp
# Port 443 is an optional restrictive-network enhancement, not the default.