90 lines
3.2 KiB
Bash
90 lines
3.2 KiB
Bash
# Should be set to the public domain where penpot is going to be served.
|
||
PENPOT_PUBLIC_URI=https://penpot.domaine.fr
|
||
|
||
# Temporal workaround because of bad builtin default
|
||
PENPOT_HTTP_SERVER_HOST=0.0.0.0
|
||
|
||
# Standard database connection parameters (only postgresql is supported):
|
||
PENPOT_DATABASE_URI=postgresql://penpot-postgres/penpot
|
||
PENPOT_DATABASE_USERNAME=penpot
|
||
PENPOT_DATABASE_PASSWORD=penpotdbpassword
|
||
|
||
# Redis is used for the websockets notifications.
|
||
PENPOT_REDIS_URI=redis://penpot-redis/0
|
||
|
||
# By default, files uploaded by users are stored in local filesystem. But it
|
||
# can be configured to store in AWS S3 or completely in de the database.
|
||
# Storing in the database makes the backups more easy but will make access to
|
||
# media less performant.
|
||
ASSETS_STORAGE_BACKEND=assets-fs
|
||
PENPOT_STORAGE_ASSETS_FS_DIRECTORY=/opt/data/assets
|
||
|
||
# Telemetry. When enabled, a periodical process will send anonymous data about
|
||
# this instance. Telemetry data will enable us to learn on how the application
|
||
# is used, based on real scenarios. If you want to help us, please leave it
|
||
# enabled.
|
||
PENPOT_TELEMETRY_ENABLED=true
|
||
|
||
# Email sending configuration. By default, emails are printed in the console,
|
||
# but for production usage is recommended to setup a real SMTP provider. Emails
|
||
# are used to confirm user registrations.
|
||
PENPOT_SMTP_ENABLED=true
|
||
PENPOT_SMTP_DEFAULT_FROM=contact@mail.com
|
||
PENPOT_SMTP_DEFAULT_REPLY_TO=contact@mail.com
|
||
PENPOT_SMTP_HOST=mail.provider.net
|
||
PENPOT_SMTP_PORT=587
|
||
PENPOT_SMTP_USERNAME=contact@mail.com
|
||
PENPOT_SMTP_PASSWORD=Pa55w0rd
|
||
PENPOT_SMTP_TLS=true
|
||
# PENPOT_SMTP_SSL=false
|
||
|
||
# Feature flags. Right now they are only affect frontend, but in
|
||
# future release they will affect to both backend and frontend.
|
||
#PENPOT_FLAGS="$PENPOT_FLAGS disable-demo-users disable-login"
|
||
#PENPOT_FLAGS="$PENPOT_FLAGS disable-registration enable-login-with-oidc"
|
||
PENPOT_FLAGS=disable-registration disable-demo-users enable-login-with-oidc
|
||
#PENPOT_REGISTRATION_ENABLED=true
|
||
|
||
|
||
# Comma separated list of allowed domains to register. Empty to allow all.
|
||
# BUG IN 2.0
|
||
# PENPOT_REGISTRATION_DOMAIN_WHITELIST=*.domaine.fr
|
||
|
||
## Authentication providers
|
||
# Google
|
||
# PENPOT_GOOGLE_CLIENT_ID=
|
||
# PENPOT_GOOGLE_CLIENT_SECRET=
|
||
|
||
# GitHub
|
||
# PENPOT_GITHUB_CLIENT_ID=
|
||
# PENPOT_GITHUB_CLIENT_SECRET=
|
||
|
||
# GitLab
|
||
# PENPOT_GITLAB_BASE_URI=https://gitlab.com
|
||
# PENPOT_GITLAB_CLIENT_ID=
|
||
# PENPOT_GITLAB_CLIENT_SECRET=
|
||
|
||
# OpenID Connect (since 1.5.0)
|
||
PENPOT_OIDC_BASE_URI=https://keycloak.domaine.fr/auth/realms/exemple/
|
||
PENPOT_OIDC_CLIENT_ID=penpot
|
||
PENPOT_OIDC_CLIENT_SECRET=<from-keycloak>
|
||
PENPOT_OIDC_NAME_ATTR=username
|
||
PENPOT_OIDC_EMAIL_ATTR=email
|
||
|
||
PENPOT_OIDC_AUTH_URI:http://keycloak.domaine.fr/login/oauth/authorize
|
||
PENPOT_OIDC_TOKEN_URI:"http://keycloak.domaine.fr/login/oauth/access_token
|
||
PENPOT_OIDC_USER_URI:"http://keycloak.domaine.fr/login/oauth/userinfo
|
||
|
||
# LDAP
|
||
# PENPOT_LDAP_HOST=ldap
|
||
# PENPOT_LDAP_PORT=10389
|
||
# PENPOT_LDAP_SSL=false
|
||
# PENPOT_LDAP_STARTTLS=false
|
||
# PENPOT_LDAP_BASE_DN=ou=people,dc=planetexpress,dc=com
|
||
# PENPOT_LDAP_BIND_DN=cn=admin,dc=planetexpress,dc=com
|
||
# PENPOT_LDAP_BIND_PASSWORD=GoodNewsEveryone
|
||
# PENPOT_LDAP_ATTRS_USERNAME=uid
|
||
# PENPOT_LDAP_ATTRS_EMAIL=mail
|
||
# PENPOT_LDAP_ATTRS_FULLNAME=cn
|
||
# PENPOT_LDAP_ATTRS_PHOTO=jpegPhoto
|
||
# PENPOT_LOGIN_WITH_LDAP=true |
