40 lines
1.6 KiB
Bash
40 lines
1.6 KiB
Bash
NODE_ENV=production
|
|
|
|
PORT=3010
|
|
API_UPSTREAM=http://127.0.0.1:6000
|
|
PUBLIC_ORIGIN=https://example.com
|
|
UPTIME_STORAGE_DIR=~/tsswebstorage
|
|
UPTIME_DATABASE_FILE=uptime.sqlite
|
|
UPTIME_SAMPLE_INTERVAL_MS=1800000
|
|
UPTIME_HISTORY_LIMIT=336
|
|
ANALYTICS_DATABASE_FILE=viewers.sqlite
|
|
ANALYTICS_RETENTION_DAYS=30
|
|
ANALYTICS_ACTIVE_WINDOW_SECONDS=75
|
|
API_CACHE_TTL_MS=15000
|
|
API_RATE_LIMIT_WINDOW_MS=60000
|
|
API_RATE_LIMIT_MAX=120
|
|
|
|
# Proxy trust. Set to "cloudflare" when the app is fronted by Cloudflare (possibly via nginx).
|
|
# "generic" trusts X-Forwarded-* without CF-specific headers. "none" ignores all proxy headers.
|
|
# Only honors trusted headers when the immediate TCP peer is in TRUSTED_UPSTREAM_IPS.
|
|
TRUST_PROXY=cloudflare
|
|
TRUSTED_UPSTREAM_IPS=127.0.0.1,::1,::ffff:127.0.0.1
|
|
|
|
WEBHOOK_PORT=3011
|
|
GITHUB_WEBHOOK_SECRET=change-me
|
|
# Comma-separated refs allowed to trigger a deploy. Defaults to refs/heads/main.
|
|
GITHUB_WEBHOOK_REFS=refs/heads/main
|
|
# Optional: refuse pushes whose repository.full_name does not match (e.g. "owner/repo").
|
|
GITHUB_WEBHOOK_REPOSITORY=
|
|
PM2_RESTART_TARGETS=tssbot-web
|
|
DISCORD_WEBHOOK_URL=https://discord.com/api/webhooks/...
|
|
# Set to "true" only if the Discord channel is private. Default omits the patch preview
|
|
# from Discord notifications to avoid leaking diffs (including any inline secrets).
|
|
DISCORD_INCLUDE_PATCH=true
|
|
|
|
# Cloudflare Turnstile. VITE_TURNSTILE_SITE_KEY is the public site key baked into the client bundle by Vite.
|
|
# TURNSTILE_SECRET_KEY is the server-only secret used to call the Siteverify endpoint.
|
|
# If left blank, the gated deletion endpoint is open (no challenge enforced). Set both to enforce.
|
|
VITE_TURNSTILE_SITE_KEY=
|
|
TURNSTILE_SECRET_KEY=
|