Files
crossdesk-server/.env.example
T

56 lines
2.1 KiB
Bash

# CrossDesk Server
EXTERNAL_IP=203.0.113.10
INTERNAL_IP=10.0.0.5
CROSSDESK_SERVER_PORT=9099
CROSSDESK_IMAGE=crossdesk/crossdesk-server:latest
CROSSDESK_DATA_DIR=/var/lib/crossdesk
CROSSDESK_LOG_DIR=/var/log/crossdesk
# Coturn is pinned to an immutable official image revision.
COTURN_IMAGE=coturn/coturn:4.17.2-r0-debian@sha256:aa68aab64a3b929d57fc2924c98ea447bf996cf8dade2508e7b71eaf23f1f14e
COTURN_PORT=3478
MIN_PORT=50000
MAX_PORT=60000
COTURN_REALM=crossdesk
# Optional DNS name or public IP advertised to clients. Defaults to EXTERNAL_IP.
COTURN_PUBLIC_HOST=
# Shared only by CrossDesk Server and Coturn. Never distribute this value to clients.
# Generate with: openssl rand -hex 32
COTURN_AUTH_SECRET=
# Lifetime of client TURN credentials issued by the signaling server (60-86400).
COTURN_CREDENTIAL_TTL_SECONDS=3600
# Optional complete ICE list; empty uses the COTURN_PUBLIC_HOST/EXTERNAL_IP defaults.
# TURN entries use COTURN_AUTH_SECRET unless shared_secret is specified per entry.
# Example: '[{"urls":["stun:203.0.113.10:3478","stun:203.0.113.20:3478"]},{"urls":["turn:203.0.113.10:3478?transport=udp","turn:203.0.113.10:3478?transport=tcp"]}]'
CROSSDESK_ICE_SERVERS=
# Generate with: openssl rand -hex 32
# Keeping this stable avoids a 438 re-authentication round-trip after restarts.
COTURN_STATELESS_NONCE_SECRET=
COTURN_LOG_LEVEL=warning
COTURN_MEMORY_LIMIT=512m
# Optional IP geolocation. When disabled, CrossDesk keeps only the client IP and
# does not start the resolver worker or classify private-network addresses.
# Keep the failure backoff in milliseconds; very small values can cause a
# request storm when the provider is unavailable.
CROSSDESK_GEOIP_LOOKUP=0
CROSSDESK_GEOIP_KEY=
CROSSDESK_GEOIP_SCHEME=https
CROSSDESK_GEOIP_HOST=api.ip2location.io
CROSSDESK_GEOIP_PORT=443
CROSSDESK_GEOIP_PATH=/?key={key}&ip={ip}
CROSSDESK_GEOIP_TIMEOUT_MS=1200
CROSSDESK_GEOIP_FAILURE_TTL_MS=60000
CROSSDESK_GEOIP_FAILURE_MAX_TTL_MS=1800000
# Optional admin dashboard credentials. Leave both empty to disable it.
ADMIN_USERNAME=
ADMIN_PASSWORD=
# Signaling capacity limits; effective connections also depend on available FDs.
CROSSDESK_NOFILE=8192
CROSSDESK_MAX_CONNECTIONS=2048