-
-
Notifications
You must be signed in to change notification settings - Fork 187
Expand file tree
/
Copy path.env
More file actions
153 lines (117 loc) · 5.84 KB
/
Copy path.env
File metadata and controls
153 lines (117 loc) · 5.84 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
# PLEASE DO NOT EDIT THIS FILE; modify '.env.override' file instead
# This is in order to avoid conflict with upstream code when updating to a newer version
# ShellHub version.
SHELLHUB_VERSION=v0.27.0-rc.7
# The default log level for ShellHub.
# VALUES: https://pkg.go.dev/github.com/sirupsen/logrus#Level
SHELLHUB_LOG_LEVEL=info
# The log format for ShellHub.
# VALUES: json, text.
SHELLHUB_LOG_FORMAT=text
# The network interface to which the gateway container will bind.
# VALUES: Any valid IP address
SHELLHUB_BIND_ADDRESS=0.0.0.0
# The HTTP port for the ShellHub web-based UI, API, and Reverse SSH tunnel.
# VALUES: Any available port on the host
SHELLHUB_HTTP_PORT=80
# The HTTPS port for the ShellHub web-based UI, API, and Reverse SSH tunnel.
# VALUES: Any available port on the host
SHELLHUB_HTTPS_PORT=443
# The SSH port for incoming SSH connections to devices.
# VALUES: Any available port on the host
SHELLHUB_SSH_PORT=22
# Set to true if using a Layer 4 load balancer with proxy protocol in front of ShellHub.
SHELLHUB_PROXY=false
# Enable automatic HTTPS with Let's Encrypt.
SHELLHUB_AUTO_SSL=false
# Path to a TLS certificate for the gateway to serve as-is, instead of obtaining
# one from Let's Encrypt. The only way to run HTTPS on a name no public CA will
# sign: an internal hostname, or a domain this deployment does not own.
# NOTICE: Only used when automatic HTTPS is enabled.
# NOTICE: Set both this and SHELLHUB_TLS_KEY_FILE, or the gateway will not start.
# VALUES: An absolute path inside the gateway container
SHELLHUB_TLS_CERT_FILE=
# Path to the private key for SHELLHUB_TLS_CERT_FILE.
# NOTICE: Set both this and SHELLHUB_TLS_CERT_FILE, or the gateway will not start.
# VALUES: An absolute path inside the gateway container
SHELLHUB_TLS_KEY_FILE=
SHELLHUB_DATABASE=postgres
SHELLHUB_POSTGRES_HOST=postgres
SHELLHUB_POSTGRES_PORT=5432
SHELLHUB_POSTGRES_USERNAME=admin
SHELLHUB_POSTGRES_PASSWORD=admin
SHELLHUB_POSTGRES_DATABASE=main
SHELLHUB_POSTGRES_LOG_LEVEL=INFO
SHELLHUB_POSTGRES_LOG_VERBOSE=false
# Extra flags appended to the PostgreSQL command line, e.g. "-c shared_buffers=4GB".
# NOTICE: Applied on restart, not reload.
SHELLHUB_POSTGRES_EXTRA_ARGS=
# The domain of the server.
# NOTICE: Required only if automatic HTTPS is enabled.
# VALUES: A valid domain name
SHELLHUB_DOMAIN=localhost
# The network name used by Docker Compose to avoid port collisions when running multiple instances.
# VALUES: A valid network name
SHELLHUB_NETWORK=shellhub_network
# The schedule for worker tasks.
# NOTICE: Format follows Go's cron package (https://pkg.go.dev/github.com/robfig/cron).
SHELLHUB_WORKER_SCHEDULE=@daily
# ShellHub edition: community (default), enterprise, or cloud.
# Enterprise-specific settings (admin credentials, SAML, web endpoints, object storage) live in .env.enterprise, loaded automatically by bin/docker-compose when edition is enterprise or cloud.
SHELLHUB_EDITION=community
# Comma-separated CIDRs a webhook-mode install key may reach despite being
# private/reserved. Empty (default) blocks all private, loopback, and metadata
# addresses, so a webhook can only reach public destinations. Set this to permit
# an on-prem integrator (e.g. 10.0.0.0/8) or the Docker bridge in local dev.
SHELLHUB_INSTALL_KEY_WEBHOOK_ALLOWED_CIDRS=
# The URL for the Go modules proxy cache (development only).
# SHELLHUB_GOPROXY=http://localhost:3333
# The URL for the NPM proxy cache (development only).
# SHELLHUB_NPM_REGISTRY=http://localhost:4873
# The Sentry DSN for error tracking.
SHELLHUB_SENTRY_DSN=
# Enable announcements about releases, new features, critical security issues, and relevant news from ShellHub Community Team.
SHELLHUB_ANNOUNCEMENTS=false
# Show features from Cloud/Enterprise versions in the ShellHub community edition.
SHELLHUB_PAYWALL=true
# Asynq configuration
# Defines the maximum duration, in hours, for which a unique job remains locked in the queue.
# If the job does not complete within this timeout, the lock is released, allowing a new instance
# of the job to be enqueued and executed.
#
# A value lower than or equal to 0 disables the uniqueness.
SHELLHUB_ASYNQ_UNIQUENESS_TIMEOUT=24
# Allow SSH connections with an agent via a public key for versions below 0.6.0.
# Values: true, false
SHELLHUB_ALLOW_PUBLIC_KEY_ACCESS_BELLOW_0_6_0=false
# The pool size for Redis cache connections.
# NOTICE: Zero means the default value of the Redis driver.
# VALUES: A non-negative integer
SHELLHUB_REDIS_CACHE_POOL_SIZE=0
# The maximum duration (in minutes) for blocking a source from login attempts.
# NOTICE: Set to 0 to disable.
# VALUES: A non-negative integer
SHELLHUB_MAXIMUM_ACCOUNT_LOCKOUT=60
# Enable Connector features on UI.
SHELLHUB_CONNECTOR=true
# Names the peers allowed to declare the client's address, through the PROXY
# protocol preamble and the X-Forwarded-* headers. The default trusts anyone; a
# deployment that knows its load balancer's range should narrow it, because this
# is the value the login lockout and the GeoIP rules are keyed on.
# VALUES: space-separated CIDRs
SHELLHUB_PROXY_TRUSTED_IPS="0.0.0.0/0 ::/0"
# The ACME directory certificates are asked for. Empty means Let's Encrypt's
# production endpoint. Point it at their staging endpoint
# (https://acme-staging-v02.api.letsencrypt.org/directory) to rehearse without
# spending the real rate limit -- staging certificates are signed by a root no
# browser trusts, so this is for validating the flow, never for serving.
SHELLHUB_ACME_CA_SERVER=
# Defines if the metrics endpoint is enabled.
SHELLHUB_METRICS=false
# Defines if empty passwords are allowed for SSH connections on the agent.
SHELLHUB_PERMIT_EMPTY_PASSWORDS=false
# Set false to disable access logs for gateway nginx
SHELLHUB_GATEWAY_ACCESS_LOGS=true
# The URL for the onboarding survey form.
# NOTICE: Leave empty to disable the onboarding survey.
SHELLHUB_ONBOARDING_URL=https://forms.infra.ossystems.io/s/f3fo9q3lkda8rrss9xpjus99