send.to/.env.example at main · sooua/send.to · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
# send.to configuration — copy to `.env` and edit.
# Only values you uncomment override the defaults in docker-compose.yml.

# ---- Host / networking ----
# Host port to publish (container always listens on 18080 internally).
HOST_PORT=18080

# ---- Storage ----
# Bind address of the internal listener, which serves /metrics (and pprof only
# if PROFILER is set). The default 127.0.0.1:6060 is unreachable from another
# container: set 0.0.0.0:6060 to let a scraper on the same network in, and do
# not publish the port.
PROFILE_LISTENER=

# Provider: local | s3
PROVIDER=local
BASEDIR=/data
# Where uploads are spooled before being handed to the backend. Keep it on a
# disk-backed path — the container's /tmp is a small tmpfs.
TEMP_PATH=/data/tmp

# ---- Limits ----
# Max upload size in KB (0 = unlimited). Uploads are spooled to TEMP_PATH
# before reaching the storage backend, so an unlimited value means a single
# upload can fill the data volume.
MAX_UPLOAD_SIZE=0
# Total size of stored uploads in KB (0 = unlimited). MAX_UPLOAD_SIZE only
# bounds one file; without this, the same permitted file uploaded often enough
# fills the volume. Requires a backend that can count what it holds; both
# shipped backends can, and one that could not would refuse to start.
MAX_STORAGE_SIZE=0
# Spool space in KB for uploads in progress (0 = unlimited). An unfinished
# resumable upload is kept for 24 hours, so on a public instance this is the
# limit that stops anyone parking bytes on TEMP_PATH indefinitely.
MAX_TEMP_SIZE=0
# Kilobytes one source address may upload per hour (0 = unlimited). The two
# totals above are blind to who filled them, so one client can reach
# MAX_STORAGE_SIZE alone and leave everyone else with a 507. This one refills
# continuously and answers 429. Keep it above MAX_UPLOAD_SIZE, or an upload at
# the permitted maximum can never succeed.
PER_IP_UPLOAD_QUOTA=0
# Seconds a browser or CDN may keep a download (0 = never cache). Downloads
# always carry an ETag and answer 304, which needs no configuration; this is
# only about letting caches *store* the response. Uploads with Max-Downloads or
# server-side encryption are never made cacheable. The cost: a deleted file
# stays reachable through the cache for up to this long.
CACHE_MAX_AGE=0
# Per-IP rate limit, requests per minute (0 = off).
RATE_LIMIT=0
# Delete uploads older than N days (0 = never).
PURGE_DAYS=30
# Hours between purge runs.
PURGE_INTERVAL=1

# ---- Shutdown ----
# How long to wait for in-flight requests on SIGINT/SIGTERM.
SHUTDOWN_TIMEOUT=30s

# ---- HTTP Basic Auth (optional) ----
# HTTP_AUTH_USER=admin
# HTTP_AUTH_PASS=change-me

# ---- CORS (optional) ----
# CORS_DOMAINS=https://example.com,https://app.example.com

# ---- Reverse proxy (optional) ----
# If running behind a proxy that adds a path prefix, set it here.
# PROXY_PATH=/send

# ---- Virus scanning (optional) ----
# CLAMAV_HOST=tcp://clamav:3310
# PERFORM_CLAMAV_PRESCAN=true
# VIRUSTOTAL_KEY=your-api-key

# ---- S3 backend (PROVIDER=s3) ----
# S3_ENDPOINT=https://s3.us-east-1.amazonaws.com
# S3_REGION=us-east-1
# AWS_ACCESS_KEY=
# AWS_SECRET_KEY=
# BUCKET=sendto-uploads