mirror of
https://github.com/kunkundi/crossdesk-server.git
synced 2026-10-26 01:34:33 +08:00
48 lines
1.9 KiB
Bash
48 lines
1.9 KiB
Bash
# CrossDesk Server
|
|
EXTERNAL_IP=203.0.113.10
|
|
INTERNAL_IP=10.0.0.5
|
|
CROSSDESK_SERVER_PORT=9099
|
|
CROSSDESK_IMAGE=crossdesk/crossdesk-server:latest
|
|
CROSSDESK_DATA_DIR=/var/lib/crossdesk
|
|
CROSSDESK_LOG_DIR=/var/log/crossdesk
|
|
# Mixed operational/security logs: default 185 days; consider applicable legal
|
|
# minimums before reducing this. Days: 1-3650. Interval seconds: 60-86400.
|
|
CROSSDESK_LOG_RETENTION_DAYS=185
|
|
# Offline device expiry also deletes its ID, password digest and associations.
|
|
CROSSDESK_OFFLINE_RETENTION_DAYS=180
|
|
CROSSDESK_RETENTION_INTERVAL_SECONDS=3600
|
|
|
|
# Coturn is pinned to an immutable official image revision.
|
|
COTURN_IMAGE=coturn/coturn:4.17.2-r0-debian@sha256:aa68aab64a3b929d57fc2924c98ea447bf996cf8dade2508e7b71eaf23f1f14e
|
|
COTURN_PORT=3478
|
|
MIN_PORT=50000
|
|
MAX_PORT=60000
|
|
COTURN_REALM=crossdesk
|
|
|
|
# Optional DNS name or public IP advertised to clients. Defaults to EXTERNAL_IP.
|
|
COTURN_PUBLIC_HOST=
|
|
# Shared only by CrossDesk Server and Coturn. Never distribute this value to clients.
|
|
# Generate with: openssl rand -hex 32
|
|
COTURN_AUTH_SECRET=
|
|
# Lifetime of client TURN credentials issued by the signaling server (60-86400).
|
|
COTURN_CREDENTIAL_TTL_SECONDS=3600
|
|
# Optional complete ICE list; empty uses the COTURN_PUBLIC_HOST/EXTERNAL_IP defaults.
|
|
# TURN entries use COTURN_AUTH_SECRET unless shared_secret is specified per entry.
|
|
# Example: '[{"urls":["stun:203.0.113.10:3478","stun:203.0.113.20:3478"]},{"urls":["turn:203.0.113.10:3478?transport=udp","turn:203.0.113.10:3478?transport=tcp"]}]'
|
|
CROSSDESK_ICE_SERVERS=
|
|
|
|
# Generate with: openssl rand -hex 32
|
|
# Keeping this stable avoids a 438 re-authentication round-trip after restarts.
|
|
COTURN_STATELESS_NONCE_SECRET=
|
|
|
|
COTURN_LOG_LEVEL=warning
|
|
COTURN_MEMORY_LIMIT=512m
|
|
|
|
# Optional admin dashboard credentials. Leave both empty to disable it.
|
|
ADMIN_USERNAME=
|
|
ADMIN_PASSWORD=
|
|
|
|
# Signaling capacity limits; effective connections also depend on available FDs.
|
|
CROSSDESK_NOFILE=8192
|
|
CROSSDESK_MAX_CONNECTIONS=2048
|