VeillaxandClaude Sonnet 5.5
042a60152c
Sandbar sends Web Push (VAPID + aes128gcm, standard library only) to devices registered for a topic, serves the companion PWA at /app/, allows one CORS origin, and exposes a read-only Hammerhead edge view and POST .../escalate. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
62 lines
2.8 KiB
Bash
62 lines
2.8 KiB
Bash
# Copy this file to .env and fill it in. Sandbar reads .env from its working directory
|
|
# (or pass -env /path/to/file). Real environment variables always win over the file.
|
|
# Never commit .env.
|
|
|
|
# Encrypts saved secrets (channel webhook URLs and email addresses) inside the database.
|
|
# Generate one with: sandbar -genkey
|
|
# Keep it apart from the data folder and back it up: without it those secrets cannot be read.
|
|
# If you leave it unset, a key is generated into <data>/master.key instead.
|
|
SANDBAR_MASTER_KEY=
|
|
|
|
# Creates the first administrator at startup (otherwise use the setup page in the browser).
|
|
#SANDBAR_ADMIN_EMAIL=you@example.com
|
|
#SANDBAR_ADMIN_PASSWORD=
|
|
|
|
# Address to listen on, and the folder for the database.
|
|
#SANDBAR_LISTEN=:8090
|
|
#SANDBAR_DATA=./sandbar-data
|
|
|
|
# Public address people use to reach Sandbar. Links in notifications use it.
|
|
#SANDBAR_URL=https://sandbar.example.com
|
|
|
|
# Serves Prometheus metrics at /metrics for a scraper that sends this as a bearer token.
|
|
# Leave empty and /metrics does not exist.
|
|
#SANDBAR_METRICS_TOKEN=
|
|
|
|
# Install new releases by itself: checks every few hours, then downloads, verifies and restarts.
|
|
# Works in Docker too (the new binary is kept in <data>/bin). Off by default.
|
|
#SANDBAR_AUTO_UPDATE=1
|
|
# Where releases come from, if not this project on git.veillax.com.
|
|
#SANDBAR_UPDATE_SERVER=https://git.veillax.com
|
|
#SANDBAR_UPDATE_REPO=Veillax/sandbar
|
|
|
|
# Behind a reverse proxy, take the client address from X-Forwarded-For. Needed for website analytics and
|
|
# the sign-in limit to tell visitors apart. Only set it when the proxy is the only way to reach Sandbar.
|
|
#SANDBAR_TRUST_PROXY=1
|
|
|
|
# How long topic messages and monitor results are kept, in days.
|
|
#SANDBAR_MESSAGE_DAYS=30
|
|
#SANDBAR_CHECK_DAYS=30
|
|
#SANDBAR_ANALYTICS_DAYS=365
|
|
|
|
# Outgoing email, for email channels and for paging people by email.
|
|
#SANDBAR_SMTP_HOST=smtp.example.com
|
|
#SANDBAR_SMTP_PORT=587
|
|
#SANDBAR_SMTP_USER=
|
|
#SANDBAR_SMTP_PASSWORD=
|
|
#SANDBAR_SMTP_FROM=sandbar@example.com
|
|
|
|
# Mobile companion app (the sandbar-mobile PWA): Web Push, served from Sandbar or from another site.
|
|
# Folder holding the app's files; Sandbar serves them at /app/. Needs HTTPS (or localhost) for push.
|
|
#SANDBAR_APP_DIR=../sandbar-mobile/public
|
|
# If the app is hosted on another origin instead, allow it to call the API.
|
|
#SANDBAR_APP_ORIGIN=https://sandbar-app.example.com
|
|
# Contact that push services (Google, Apple, Mozilla) can reach if Sandbar misbehaves. Defaults to SANDBAR_URL when that is https.
|
|
#SANDBAR_VAPID_SUBJECT=mailto:you@example.com
|
|
# Development only: allow push endpoints on plain http and private addresses.
|
|
#SANDBAR_PUSH_DEV=1
|
|
# Show Hammerhead's edges and tunnel state in the app. Use an account without two-factor sign-in, read-only if you can.
|
|
#SANDBAR_HAMMERHEAD_URL=https://hammerhead.example.com
|
|
#SANDBAR_HAMMERHEAD_EMAIL=
|
|
#SANDBAR_HAMMERHEAD_PASSWORD=
|