mirror of
https://github.com/yusufipk/OpenFrame.git
synced 2026-09-11 09:36:08 +00:00
yusufipk
4bf6e821af
- Added support for self-hosted S3 video uploads with new environment variables: OPENFRAME_ENABLE_S3_VIDEO_UPLOADS and OPENFRAME_MAX_VIDEO_UPLOAD_BYTES. - Updated .env.example and .env.docker.example to reflect new configuration options. - Enhanced Content Security Policy to include origins for S3-compatible storage. - Updated dependencies for AWS SDK to support new features. - Refactored upload logic to accommodate both Bunny and S3 upload providers. - Updated documentation to clarify the usage of direct uploads and S3 configurations. - Closes #11
67 lines
2.2 KiB
Bash
67 lines
2.2 KiB
Bash
# Copy to .env.docker before starting the Docker stack.
|
|
|
|
# Application URLs
|
|
NEXTAUTH_URL="http://localhost:3000"
|
|
NEXT_PUBLIC_APP_URL="http://localhost:3000"
|
|
AUTH_TRUST_HOST="true"
|
|
|
|
# Generate a strong random secret before first boot.
|
|
NEXTAUTH_SECRET="replace-with-openssl-rand-base64-32"
|
|
|
|
# Docker Compose defaults
|
|
POSTGRES_DB="openframe"
|
|
POSTGRES_USER="replace-with-postgres-user"
|
|
POSTGRES_PASSWORD="replace-with-strong-postgres-password"
|
|
DATABASE_URL="postgresql://replace-with-postgres-user:replace-with-strong-postgres-password@postgres:5432/openframe?schema=public"
|
|
NODE_ENV="production"
|
|
|
|
# Self-host defaults
|
|
OPENFRAME_ENABLE_STRIPE="false"
|
|
OPENFRAME_ENABLE_BUNNY_UPLOADS="false"
|
|
OPENFRAME_ENABLE_S3_VIDEO_UPLOADS="true"
|
|
OPENFRAME_MAX_VIDEO_UPLOAD_BYTES="5368709120"
|
|
OPENFRAME_REQUIRE_INVITE_CODE="false"
|
|
SELF_HOSTED_AUTO_CREATE_BUCKET="true"
|
|
|
|
# Trusted reverse proxy mode — controls which headers getClientIp() trusts for rate limiting.
|
|
# Set this only when you have confirmed that your proxy strips/overwrites client-supplied headers.
|
|
# cloudflare — trust cf-connecting-ip (Cloudflare edge in front of the origin)
|
|
# nginx — trust x-real-ip / last x-forwarded-for (Nginx real_ip_header with set_real_ip_from)
|
|
# Leave unset for local dev or when no trusted proxy is in place.
|
|
TRUSTED_PROXY_MODE="nginx"
|
|
|
|
# MinIO-backed S3 storage
|
|
MINIO_ROOT_USER="replace-with-minio-root-user"
|
|
MINIO_ROOT_PASSWORD="replace-with-strong-minio-password"
|
|
R2_ENDPOINT="http://minio:9000"
|
|
# Browser-facing endpoint used for presigned upload URLs (must be reachable from the browser).
|
|
R2_PRESIGN_ENDPOINT="http://localhost:9000"
|
|
R2_PUBLIC_BASE_URL="http://localhost:9000/openframe"
|
|
R2_ACCESS_KEY_ID="replace-with-minio-root-user"
|
|
R2_SECRET_ACCESS_KEY="replace-with-strong-minio-password"
|
|
R2_BUCKET_NAME="openframe"
|
|
|
|
# Optional auth/admin configuration
|
|
ADMIN_EMAILS=""
|
|
INVITE_CODE=""
|
|
|
|
# Optional integrations. Leave blank to disable.
|
|
GOOGLE_CLIENT_ID=""
|
|
GOOGLE_CLIENT_SECRET=""
|
|
GITHUB_CLIENT_ID=""
|
|
GITHUB_CLIENT_SECRET=""
|
|
SMTP_HOST=""
|
|
SMTP_PORT="587"
|
|
SMTP_USER=""
|
|
SMTP_PASSWORD=""
|
|
SMTP_FROM=""
|
|
TELEGRAM_BOT_TOKEN=""
|
|
STRIPE_SECRET_KEY=""
|
|
STRIPE_PRICE_ID=""
|
|
STRIPE_WEBHOOK_SECRET=""
|
|
BUNNY_STREAM_API_KEY=""
|
|
BUNNY_STREAM_LIBRARY_ID=""
|
|
BUNNY_API_KEY=""
|
|
BUNNY_CDN_URL=""
|
|
NEXT_PUBLIC_BUNNY_CDN_URL=""
|