.env.example

# Port the server listens on
PORT=8080
# Absolute path for device registry and frame cache
DATA_DIR=./data
# Printed on the enrolment screen. Falls back to the bound LAN IP.
PUBLIC_BASE_URL=

# Calendar feeds are fetched by the server. Public destinations are allowed;
# private LAN destinations are blocked unless this exact opt-in is set to 1.
# Loopback and link-local destinations remain blocked even when enabled.
#CALENDAR_ALLOW_PRIVATE_NETWORKS=1

# Uncomment to require a password for the web UI. /api/devices/:id/frame and
# /health stay open regardless, since firmware cannot log in and monitoring
# should not need credentials. NOTE: this is plain HTTP — the password and
# session cookie cross your network in clear text, protection against casual
# access only, not against a hostile network.
#INKPANEL_PASSWORD=change-me

# Set this if the server sits behind a reverse proxy. Without it, req.ip is
# the proxy's own address for every client, so the login rate limiter buckets
# everyone into one shared counter — five bad attempts from anyone locks out
# every client for 15 minutes. Set it to the number of proxy hops in front of
# the server (usually 1), or a comma-separated list of trusted addresses/
# subnets. See https://expressjs.com/en/guide/behind-proxies.html.
#TRUST_PROXY=1