.env.example

# Copy to .env next to docker-compose.yml; docker compose reads it
# automatically. Or export these in the shell / your deploy platform's
# environment settings instead. These configure the compose deployment (hub +
# the `server` workstation container); other workstations are configured on
# their own machines (`bunx prompt-portal install`; see the README).

# Browser sign-in. Pick any username; make the password long and random.
PROMPTPORTAL_WEBACCESS_USERNAME=change-me
PROMPTPORTAL_WEBACCESS_PASSWORD=change-me-long-random

# Workstation registration: what `prompt-portal` on every workstation (including
# the bundled `server` container) presents to the hub. Make it long, random,
# and different from the web-access password.
PROMPTPORTAL_WORKSTATION_PASSWORD=change-me-long-random

# The server workstation's name in the UI.
#PROMPTPORTAL_NODE_NAME=server

# Shell hosted in each session on the `server` workstation (a binary present
# in the workstation image; default bash).
#PROMPTPORTAL_SHELL=bash

# Set when a reverse proxy you control (or tailscale serve) is the only way to
# reach the server; keys the brute-force lockout on X-Forwarded-For instead of
# the proxy's IP.
#PROMPTPORTAL_TRUST_PROXY=1

# Comma-separated Host allowlist for the hub (loopback always passes); other
# hosts get 421 — shuts out DNS rebinding. Include `hub`: the bundled `server`
# workstation dials the hub by that name across the compose network.
#PROMPTPORTAL_ALLOWED_HOSTS=portal.example.com,hub