.env.example

# CrossDesk Server
EXTERNAL_IP=203.0.113.10
INTERNAL_IP=10.0.0.5
CROSSDESK_SERVER_PORT=9099
CROSSDESK_IMAGE=crossdesk/crossdesk-server:latest
CROSSDESK_DATA_DIR=/var/lib/crossdesk
CROSSDESK_LOG_DIR=/var/log/crossdesk

# Coturn is pinned to an immutable official image revision.
COTURN_IMAGE=coturn/coturn:4.17.2-r0-debian@sha256:aa68aab64a3b929d57fc2924c98ea447bf996cf8dade2508e7b71eaf23f1f14e
COTURN_PORT=3478
MIN_PORT=50000
MAX_PORT=60000
COTURN_REALM=crossdesk

# Optional DNS name or public IP advertised to clients. Defaults to EXTERNAL_IP.
COTURN_PUBLIC_HOST=
# Shared only by CrossDesk Server and Coturn. Never distribute this value to clients.
# Generate with: openssl rand -hex 32
COTURN_AUTH_SECRET=
# Lifetime of client TURN credentials issued by the signaling server (60-86400).
COTURN_CREDENTIAL_TTL_SECONDS=3600

# Generate with: openssl rand -hex 32
# Keeping this stable avoids a 438 re-authentication round-trip after restarts.
COTURN_STATELESS_NONCE_SECRET=

COTURN_LOG_LEVEL=warning
COTURN_MEMORY_LIMIT=512m

# Optional IP geolocation. When disabled, CrossDesk keeps only the client IP and
# does not start the resolver worker or classify private-network addresses.
# Keep the failure backoff in milliseconds; very small values can cause a
# request storm when the provider is unavailable.
CROSSDESK_GEOIP_LOOKUP=0
CROSSDESK_GEOIP_KEY=
CROSSDESK_GEOIP_SCHEME=https
CROSSDESK_GEOIP_HOST=api.ip2location.io
CROSSDESK_GEOIP_PORT=443
CROSSDESK_GEOIP_PATH=/?key={key}&ip={ip}
CROSSDESK_GEOIP_TIMEOUT_MS=1200
CROSSDESK_GEOIP_FAILURE_TTL_MS=60000
CROSSDESK_GEOIP_FAILURE_MAX_TTL_MS=1800000

# Optional admin dashboard credentials. Leave both empty to disable it.
ADMIN_USERNAME=
ADMIN_PASSWORD=