| [7bc636b] | 1 | NODE_ENV=development
|
|---|
| 2 | PORT=3000
|
|---|
| [f99bbe8] | 3 |
|
|---|
| 4 | # Network interface to bind. 127.0.0.1 = only reachable via a reverse proxy on the
|
|---|
| 5 | # same machine (recommended for a manual install behind Caddy/nginx — keeps the app
|
|---|
| 6 | # off the public internet). Use 0.0.0.0 only if you need direct external access
|
|---|
| 7 | # (no proxy/HTTPS — not recommended). Docker sets this to 0.0.0.0 itself.
|
|---|
| 8 | HOST=127.0.0.1
|
|---|
| [09ee2bd] | 9 | # Secret used to sign login-session cookies. Leave EMPTY to auto-generate a strong
|
|---|
| 10 | # one on first start (saved to storage/.session-secret, stays stable across
|
|---|
| 11 | # restarts/updates). Or set your own: openssl rand -hex 32
|
|---|
| 12 | SESSION_SECRET=
|
|---|
| [7bc636b] | 13 | DATABASE_PATH=./storage/database.sqlite
|
|---|
| 14 | MEDIA_PATH=./storage/media
|
|---|
| [c80e78b] | 15 |
|
|---|
| [09ee2bd] | 16 | # Canonical public URL of this site (scheme + host, no trailing slash), e.g.
|
|---|
| 17 | # https://yourdomain.com . Used to build correct links in emails (password reset)
|
|---|
| 18 | # and OAuth redirects instead of trusting request headers (anti-spoofing).
|
|---|
| 19 | # Optional: leave empty and it falls back to the request host (fine for local/dev);
|
|---|
| 20 | # set it for production so email/login links point at the right place.
|
|---|
| 21 | PUBLIC_BASE_URL=
|
|---|
| [c80e78b] | 22 |
|
|---|
| [bb42dfb] | 23 | # ── Administrator ───────────────────────────────────────────────────
|
|---|
| 24 | # The admin logs in with username + password. On first start you create your
|
|---|
| 25 | # admin account via /auth/register; after that, registration is closed.
|
|---|
| 26 | # Forgot your password? -> "Forgot password" (email, see SMTP below) or always:
|
|---|
| 27 | # `npm run reset-admin` on the server.
|
|---|
| [9e27d64] | 28 |
|
|---|
| [bb42dfb] | 29 | # ── Email (optional) — for "forgot password" reset links ────────────
|
|---|
| 30 | # Not set? Then reset only works via `npm run reset-admin` on the server.
|
|---|
| [9e27d64] | 31 | SMTP_HOST=
|
|---|
| 32 | SMTP_PORT=587
|
|---|
| 33 | SMTP_USER=
|
|---|
| 34 | SMTP_PASS=
|
|---|
| 35 | SMTP_FROM=
|
|---|
| [cb01666] | 36 |
|
|---|
| [bb42dfb] | 37 | # ── Lite mode (optional) ────────────────────────────────────────────
|
|---|
| 38 | # Set to "off" to disable the whole audio feature (no built-in music hosting/
|
|---|
| 39 | # player, no ffmpeg needed). Klonkt then runs as a lightweight blog/photo/EPK
|
|---|
| 40 | # site, even on an environment without ffmpeg. Hub and Circles keep working.
|
|---|
| 41 | # External embeds (YouTube/SoundCloud/Spotify) keep working too.
|
|---|
| [196e1be] | 42 | # Reversible: set back to "on" (or remove) and restart — no reinstall, tracks kept.
|
|---|
| [cb01666] | 43 | KLONKT_AUDIO=on
|
|---|
| [cb4eda5] | 44 |
|
|---|
| [cbcc8a4] | 45 | # ── Premium extras ──────────────────────────────────────────────────
|
|---|
| 46 | # The core app, all updates and Cirkels are free. A handful of extras
|
|---|
| 47 | # (newsletter, statistics, EPK, link-in-bio, embeddable player, show agenda,
|
|---|
| 48 | # release planning, download-for-email) are unlocked by a one-time Patreon
|
|---|
| 49 | # supporter link — that's what funds the project:
|
|---|
| 50 | # klonkt.com / patreon.com/c/roboburr. Leave this on.
|
|---|
| [cb4eda5] | 51 | KLONKT_PREMIUM_ENABLED=on
|
|---|