# Copy to .env (ignored by git). Use an absolute dedicated data directory.
DSH_HOST_DATA_ROOT=/var/lib/dsh-mgr
DSH_ADMIN_USERNAME=admin
# Supply a unique strong password before FIRST start; the panel reads it only
# while the account table is empty. Remove the value after the administrator
# account exists, then run `docker compose up -d --force-recreate panel`
# to remove it from the container environment and `docker inspect` output.
# Restarting the existing container does not update its environment.
DSH_ADMIN_PASSWORD=
# Numeric group from: stat -c %g /var/run/docker.sock
DOCKER_GID=
# Exact docker info --format {{.DockerRootDir}}; mounted read-only for statfs.
DSH_DOCKER_ROOT_DIR=
# Optional exact extension allowlist, e.g. .txt,.md,.json,.yaml,.go
# Empty permits arbitrary workspace files; this is not malware/content scanning.
UPLOAD_ALLOWED_EXTENSIONS=
# Public origin of the panel exactly as browsers see it (scheme://host, no
# path); controls Origin/CSRF validation and Secure cookies.
PANEL_PUBLIC_URL=http://127.0.0.1:8088
# Optional proxy networks. X-Forwarded-For is ignored unless the peer is in these CIDRs.
TRUSTED_PROXY_CIDRS=
# Absolute login lifetime (Go duration: 24h, 168h for 7 days). Applies to new logins.
# Refresh does not extend this deadline. Invalid/non-positive values prevent startup.
SESSION_TTL=24h
# Trusted executable runtime build source. Do not embed credentials in this URL.
DSH_RELEASE_REPOSITORY=https://git.misaka.ren/m1saka/dsh-web.git
DSH_RELEASE_BRANCH=dockerfile