2026-09-19 14:17:27 +02:00
|
|
|
CMS_HTTP_ADDR=:8080
|
|
|
|
|
CMS_ALLOWED_ORIGINS=http://localhost:5173
|
2026-09-19 17:33:44 +02:00
|
|
|
CMS_PROFILE=demo
|
|
|
|
|
# Production profile uses SSO and reserves this URL for the PostgreSQL
|
|
|
|
|
# persistence adapter. Demo mode intentionally does not need a database.
|
|
|
|
|
CMS_POSTGRES_URL=
|
|
|
|
|
|
|
|
|
|
# Optional content file. Leave empty for a pure in-memory demo that reloads the
|
|
|
|
|
# seed on every start. Set it to a path on a mounted volume to keep edits:
|
|
|
|
|
# CMS_CONTENT_FILE=/data/content.json
|
|
|
|
|
CMS_CONTENT_FILE=
|
2026-09-19 14:48:42 +02:00
|
|
|
|
2026-09-19 16:45:24 +02:00
|
|
|
# Single sign-on. The CMS does not sign anyone in: an identity-aware proxy
|
|
|
|
|
# (oauth2-proxy, Authelia, Cloudflare Access, ...) authenticates the owner and
|
|
|
|
|
# forwards a header on every accepted request. Requests without it are anonymous.
|
|
|
|
|
#
|
|
|
|
|
# Header the proxy sets. oauth2-proxy forwards its access token in
|
|
|
|
|
# X-Auth-Request-Access-Token; Authelia uses Remote-User or Authorization.
|
|
|
|
|
CMS_SSO_HEADER=X-SSO-Token
|
|
|
|
|
# Optional shared secret. Leave empty to accept any non-empty forwarded value.
|
|
|
|
|
CMS_SSO_TOKEN=
|
|
|
|
|
# Optional cookie fallback when the proxy sets a cookie instead of a header.
|
|
|
|
|
CMS_SSO_COOKIE=
|
