CMS_HTTP_ADDR=:8080
CMS_ALLOWED_ORIGINS=http://localhost:5173
CMS_PROFILE=demo
# Production profile uses SSO and reserves this URL for the PostgreSQL
# persistence adapter. Demo mode intentionally does not need a database.
CMS_POSTGRES_URL=

# Optional content file. Leave empty for a pure in-memory demo that reloads the
# seed on every start. Set it to a path on a mounted volume to keep edits:
#   CMS_CONTENT_FILE=/data/content.json
CMS_CONTENT_FILE=

# Single sign-on. The CMS does not sign anyone in: an identity-aware proxy
# (oauth2-proxy, Authelia, Cloudflare Access, ...) authenticates the owner and
# forwards a header on every accepted request. Requests without it are anonymous.
#
# Header the proxy sets. oauth2-proxy forwards its access token in
# X-Auth-Request-Access-Token; Authelia uses Remote-User or Authorization.
CMS_SSO_HEADER=X-SSO-Token
# Optional shared secret. Leave empty to accept any non-empty forwarded value.
CMS_SSO_TOKEN=
# Optional cookie fallback when the proxy sets a cookie instead of a header.
CMS_SSO_COOKIE=