Skip to content

Commit 3454058

Browse files
TheMDevbbilly1
andauthored
Update Docs With Docker PASSWORD_FILE (#74)
Co-authored-by: Simon <simobilleter@gmail.com>
1 parent b1a6cc0 commit 3454058

1 file changed

Lines changed: 33 additions & 23 deletions

File tree

mkdocs/docs/installation/env-vars.md

Lines changed: 33 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -11,13 +11,16 @@ This is a comprehensive list of environment variables for the **Tube Archivist**
1111
- Data Types: Expected data type of the environment variable.
1212
- <span class="tag-neutral">Type: String</span>: Regular string
1313
- <span class="tag-neutral">Type: Number</span>: Will get converted to a number
14-
- <span class="tag-neutral">Type: Boolean</span>: Will evaluate to `True` to _enable_ the discribed functionality. Set to anything except blank string to enable. To disable, remove the variable.
14+
- <span class="tag-neutral">Type: Boolean</span>: Will evaluate to `True` to _enable_ the described functionality. Set to anything except blank string to enable. To disable, remove the variable.
15+
16+
!!! tip
17+
Some environment variables can be suffixed with `_FILE` to allow passing in passwords using docker secretes.
1518

1619
## TA_HOST
1720
<span class="tag-alert">Required</span>
1821
<span class="tag-neutral">Type: String</span>
1922

20-
Set the environment variable `TA_HOST` to match with the expected origin from where you will access your **Tube Archivist** instance. That is whatever you input into your browser URL bar.
23+
Set the environment variable `TA_HOST` to match with the expected origin from where you will access your **Tube Archivist** instance. That is whatever you input into your browser URL bar.
2124

2225
- This can be a domain like *example.com*, a subdomain like *ta.example.com* or an IP address like *192.168.1.20*.
2326
- Define the protocol, e.g. `https://` oder `http://`.
@@ -28,19 +31,22 @@ Set the environment variable `TA_HOST` to match with the expected origin from wh
2831

2932
## TA_USERNAME
3033
<span class="tag-alert">Required</span>
31-
<span class="tag-neutral">Type: String</span>
34+
<span class="tag-neutral">Type: String</span>
3235
Username for your initial credentials. Changing that after first time starting the application won't have any effect. Use the admin interface to change or add that.
3336

3437
## TA_PASSWORD
3538
<span class="tag-alert">Required</span>
36-
<span class="tag-neutral">Type: String</span>
39+
<span class="tag-neutral">Type: String</span>
3740
Password for your initial user. Changing that after creating the user, does not have any effect. Use the admin interface to change your password.
3841

42+
!!! tip
43+
`TA_PASSWORD` can be suffixed with `_FILE` to allow passing in passwords using docker secretes.
44+
3945
If you forgot your password, see [User Management/#Forgot Password](../users.md#forgot-password).
4046

4147
## TZ
4248
<span class="tag-optional">Optional</span>
43-
<span class="tag-neutral">Type: String</span>
49+
<span class="tag-neutral">Type: String</span>
4450
Your timezone. This is used for the scheduler. Defaults to UTC.
4551

4652
!!! warning "Canonical vs Linked Timezones"
@@ -51,90 +57,94 @@ Your timezone. This is used for the scheduler. Defaults to UTC.
5157

5258
## HOST_UID and HOST_GID
5359
<span class="tag-optional">Optional</span>
54-
<span class="tag-neutral">Type: Number</span>
55-
Change the user and group owning the media files generated by TubeArchivist. This uses `chown` on the output files.
60+
<span class="tag-neutral">Type: Number</span>
61+
Change the user and group owning the media files generated by TubeArchivist. This uses `chown` on the output files.
5662

5763
!!! warning "Filesystem Compatibility"
58-
Not all filesystems support `chown`. Notably `NFS` does not have functionality to change the ownership of files.
64+
Not all filesystems support `chown`. Notably `NFS` does not have functionality to change the ownership of files.
5965

6066
You will see a error like `PermissionError: [Errno 1] Operation not permitted` when TA is trying to change the ownership of the downloaded file.
6167

6268
_Not_ setting these variables, will disable the chown functionality.
6369

6470
## TA_PORT
6571
<span class="tag-optional">Optional</span>
66-
<span class="tag-neutral">Type: Number</span>
72+
<span class="tag-neutral">Type: Number</span>
6773
This changes the actual port Nginx is listening on. That is the public port exposed through the docker container. If you have a port collision on default port 8000, see bellow.
6874

6975
## TA_BACKEND_PORT
7076
<span class="tag-optional">Optional</span>
71-
<span class="tag-neutral">Type: Number</span>
77+
<span class="tag-neutral">Type: Number</span>
7278
This changes the port where the backend service is running on. That is container internal only, but you might need to change that if you use a shared docker network and have a port collision there.
7379

7480
## TA_ENABLE_AUTH_PROXY
7581
<span class="tag-optional">Optional</span>
76-
<span class="tag-neutral">Type: Boolean</span>
82+
<span class="tag-neutral">Type: Boolean</span>
7783
Configure TA to authenticate with a auth proxy. See [configuration/forward-auth](../configuration/forward-auth.md) for more details.
7884

7985
## TA_LDAP
8086
<span class="tag-optional">Optional</span>
81-
<span class="tag-neutral">Type: Boolean</span>
87+
<span class="tag-neutral">Type: Boolean</span>
8288
Configure TA to use LDAP for authentication. See [configuration/ldap](../configuration/ldap.md) for more details.
8389

8490
## TA_AUTO_UPDATE_YTDLP
8591
<span class="tag-optional">Optional</span>
86-
<span class="tag-neutral">Type: String</span>
92+
<span class="tag-neutral">Type: String</span>
8793
!!! warning "Potential Incompatibility"
8894
Future versions of yt-dlp may not be compatible with your current Tube Archivist version. Subtle changes in yt-dlp might lead to unexpected, incomplete or wrong data getting indexed. If you use this, make sure to have your backup up to date and monitor that the metadata indexed is as expected.
8995

90-
If you are experiencing any problems, please report them, so we can address them ahead of a regular relese.
96+
If you are experiencing any problems, please report them, so we can address them ahead of a regular release.
9197

9298
Configure TA to automatically install the latest yt-dlp on container start. Enable by setting to `release` or `nightly` depending on which version you would like to install.
9399

94100
## DISABLE_STATIC_AUTH
95101
<span class="tag-optional">Optional</span>
96-
<span class="tag-neutral">Type: Boolean</span>
102+
<span class="tag-neutral">Type: Boolean</span>
97103
This will disable authentication for static assets like your video mp4 files, subtitles and artwork. This might be required if you need to access the media files over the HTTP server but you are not able to pass authentication headers.
98104

99105
!!! info
100106
This is `read only` access and does not allow for deleting/modifying any media files. But it is still recommended limit exposure or add additional protections if you enable that.
101107

102108
## DJANGO_DEBUG
103109
<span class="tag-optional">Optional</span>
104-
<span class="tag-neutral">Type: Boolean</span>
110+
<span class="tag-neutral">Type: Boolean</span>
105111
Enable debug to show additional log information like HTTP requests and yt-dlp configurations in your Docker logs. Helpful for development and debugging.
106112

107113
!!! warning "Memory Leak"
108114
Only set this temporarily if you need to inspect some specific problem. Don't forget to remove it again after. This introduces a memory leak plus standard error messages from the backend will be in HTML showing a detailed stack trace and additional info instead of JSON, meaning the frontend is not able to display any error messages.
109115

110116
## REDIS_CON
111117
<span class="tag-alert">Required</span>
112-
<span class="tag-neutral">Type: String</span>
118+
<span class="tag-neutral">Type: String</span>
113119
Connection string for your Redis instance. Specify protocol, host and port.
114120
E.g.: `redis://archivist-redis:6379`
115121

116122
## ES_URL
117123
<span class="tag-alert">Required</span>
118-
<span class="tag-neutral">Type: String</span>
119-
URL for your ElasticSearch instance. Add protocol and port.
124+
<span class="tag-neutral">Type: String</span>
125+
URL for your ElasticSearch instance. Add protocol and port.
120126
E.g. `http://archivist-es:9200`.
121127

122128
## ELASTIC_PASSWORD
123129
<span class="tag-alert">Required</span>
124-
<span class="tag-neutral">Type: String</span>
130+
<span class="tag-neutral">Type: String</span>
125131
This is the password for ElasticSearch. Make sure it matches with the equivalent password set for the ElasticSearch container.
126132

133+
!!! tip
134+
`ELASTIC_PASSWORD` can be suffixed with `_FILE` to allow passing in passwords using docker secretes.
135+
The `_FILE` convention is also supported by the [ElasticSearch](https://www.elastic.co/docs/deploy-manage/deploy/self-managed/install-elasticsearch-docker-configure) docker image.
136+
127137
## ELASTIC_USER
128138
<span class="tag-optional">Optional</span>
129-
<span class="tag-neutral">Type: String</span>
139+
<span class="tag-neutral">Type: String</span>
130140
Optionally change the ElasticSearch username from the default `elastic`.
131141

132142
## ES_DISABLE_VERIFY_SSL
133143
<span class="tag-optional">Optional</span>
134-
<span class="tag-neutral">Type: Boolean</span>
144+
<span class="tag-neutral">Type: Boolean</span>
135145
Optionally disable SSL verification for ElasticSearch. Useful if you use a self signed certificate for ElasticSearch.
136146

137147
## ES_SNAPSHOT_DIR
138148
<span class="tag-optional">Optional</span>
139-
<span class="tag-neutral">Type: String</span>
149+
<span class="tag-neutral">Type: String</span>
140150
Optionally set a custom path where elastic search stores snapshots for master/data nodes. Note, that path applies to inside the ES container.

0 commit comments

Comments
 (0)