mirror of
https://github.com/yusufipk/OpenFrame.git
synced 2026-09-11 09:36:08 +00:00
yusufipek
0ff8b42b4a
NEXT_PUBLIC_BUNNY_CDN_URL is inlined into the client bundle at build time, and the published image is built by CI without it, so the browser had no host to build a playlist URL from no matter what the operator set in .env.docker. The player read the empty URL as a stream that had not finished encoding and sat on 'Video Is Processing', retrying forever. The server knows the value on every request, so the root layout now serialises the public settings into a JSON script tag and the browser reads them from there, falling back to the build-time variable for source builds. The direct-download allow list came through the same broken path and moves with it. Closes #60
77 lines
2.8 KiB
Bash
77 lines
2.8 KiB
Bash
# Copy to .env.docker before starting the Docker stack.
|
|
|
|
# Application URLs
|
|
NEXTAUTH_URL="http://localhost:3000"
|
|
NEXT_PUBLIC_APP_URL="http://localhost:3000"
|
|
AUTH_TRUST_HOST="true"
|
|
|
|
# Generate a strong random secret before first boot.
|
|
NEXTAUTH_SECRET="replace-with-openssl-rand-base64-32"
|
|
|
|
# Docker Compose defaults
|
|
POSTGRES_DB="openframe"
|
|
POSTGRES_USER="replace-with-postgres-user"
|
|
POSTGRES_PASSWORD="replace-with-strong-postgres-password"
|
|
DATABASE_URL="postgresql://replace-with-postgres-user:replace-with-strong-postgres-password@postgres:5432/openframe?schema=public"
|
|
NODE_ENV="production"
|
|
|
|
# Self-host defaults
|
|
OPENFRAME_ENABLE_STRIPE="false"
|
|
OPENFRAME_ENABLE_BUNNY_UPLOADS="false"
|
|
OPENFRAME_ENABLE_S3_VIDEO_UPLOADS="true"
|
|
# OPENFRAME_MAX_VIDEO_UPLOAD_BYTES="5368709120"
|
|
OPENFRAME_REQUIRE_INVITE_CODE="false"
|
|
SELF_HOSTED_AUTO_CREATE_BUCKET="true"
|
|
|
|
# Project bulk-download manifest limits (GET /api/projects/[projectId]/download).
|
|
OPENFRAME_PROJECT_DOWNLOAD_MAX_FILES="250"
|
|
# 20 GiB in bytes (20 * 1024 * 1024 * 1024)
|
|
OPENFRAME_PROJECT_DOWNLOAD_MAX_BYTES="21474836480"
|
|
# Comma-separated hostnames for direct version download URLs (optional).
|
|
NEXT_PUBLIC_DIRECT_DOWNLOAD_ALLOWED_HOSTS=""
|
|
|
|
# Trusted reverse proxy mode — controls which headers getClientIp() trusts for rate limiting.
|
|
# Set this only when you have confirmed that your proxy strips/overwrites client-supplied headers.
|
|
# cloudflare — trust cf-connecting-ip (Cloudflare edge in front of the origin)
|
|
# nginx — trust x-real-ip / last x-forwarded-for (Nginx real_ip_header with set_real_ip_from)
|
|
# Leave unset for local dev or when no trusted proxy is in place.
|
|
TRUSTED_PROXY_MODE="nginx"
|
|
|
|
# MinIO-backed S3 storage
|
|
MINIO_ROOT_USER="replace-with-minio-root-user"
|
|
MINIO_ROOT_PASSWORD="replace-with-strong-minio-password"
|
|
R2_ENDPOINT="http://minio:9000"
|
|
# Browser-facing MinIO origin for presigned upload URLs (scheme + host, no path).
|
|
# Use your public MinIO domain when behind a reverse proxy, e.g. https://minio.example.com
|
|
R2_PRESIGN_ENDPOINT="http://localhost:9000"
|
|
R2_PUBLIC_BASE_URL="http://localhost:9000/openframe"
|
|
R2_ACCESS_KEY_ID="replace-with-minio-root-user"
|
|
R2_SECRET_ACCESS_KEY="replace-with-strong-minio-password"
|
|
R2_BUCKET_NAME="openframe"
|
|
|
|
# Optional auth/admin configuration
|
|
ADMIN_EMAILS=""
|
|
INVITE_CODE=""
|
|
|
|
# Optional integrations. Leave blank to disable.
|
|
GOOGLE_CLIENT_ID=""
|
|
GOOGLE_CLIENT_SECRET=""
|
|
GITHUB_CLIENT_ID=""
|
|
GITHUB_CLIENT_SECRET=""
|
|
SMTP_HOST=""
|
|
SMTP_PORT="587"
|
|
SMTP_USER=""
|
|
SMTP_PASSWORD=""
|
|
SMTP_FROM=""
|
|
TELEGRAM_BOT_TOKEN=""
|
|
STRIPE_SECRET_KEY=""
|
|
STRIPE_PRICE_ID=""
|
|
STRIPE_WEBHOOK_SECRET=""
|
|
BUNNY_STREAM_API_KEY=""
|
|
BUNNY_STREAM_LIBRARY_ID=""
|
|
BUNNY_API_KEY=""
|
|
# Playback host for Bunny versions. Set BUNNY_CDN_URL: the app reads it at request
|
|
# time, while NEXT_PUBLIC_BUNNY_CDN_URL only reaches the browser in a source build.
|
|
BUNNY_CDN_URL=""
|
|
NEXT_PUBLIC_BUNNY_CDN_URL=""
|