gatecontrol/.env.example at master · CallMeTechie/gatecontrol · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
# ─── Application ─────────────────────────────────────
GC_APP_NAME=GateControl
# Loopback by default: the shipped compose uses network_mode: host, so
# 0.0.0.0 would expose the admin UI in plain HTTP on every interface —
# past Caddy, TLS and HSTS. Caddy reaches the app on 127.0.0.1.
# Set 0.0.0.0 only if you publish the port from a bridge network.
GC_HOST=127.0.0.1
GC_PORT=3000
GC_BASE_URL=https://gate.example.com
GC_SECRET=
GC_DB_PATH=/data/gatecontrol.db
GC_LOG_LEVEL=info

# ─── Auth ────────────────────────────────────────────
GC_ADMIN_USER=admin
GC_ADMIN_PASSWORD=changeme
GC_SESSION_MAX_AGE=86400000
GC_RATE_LIMIT_LOGIN=5
GC_RATE_LIMIT_API=100

# ─── WireGuard ───────────────────────────────────────
GC_WG_INTERFACE=wg0
GC_WG_CONFIG_PATH=/etc/wireguard/wg0.conf
GC_WG_HOST=gate.example.com
GC_WG_PORT=51820
GC_WG_SUBNET=10.8.0.0/24
GC_WG_GATEWAY_IP=10.8.0.1
GC_WG_DNS=1.1.1.1,8.8.8.8
GC_WG_ALLOWED_IPS=0.0.0.0/0
GC_WG_PERSISTENT_KEEPALIVE=25
GC_WG_POST_UP=iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
GC_WG_POST_DOWN=iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
GC_WG_MTU=

# ─── Caddy ───────────────────────────────────────────
GC_CADDY_ADMIN_URL=http://127.0.0.1:2019
GC_CADDY_DATA_DIR=/data/caddy
GC_CADDY_EMAIL=
GC_CADDY_ACME_CA=

# ─── i18n ────────────────────────────────────────────
GC_DEFAULT_LANGUAGE=en
GC_AVAILABLE_LANGUAGES=en,de

# ─── Theme ───────────────────────────────────────────
GC_DEFAULT_THEME=default

# ─── Network ─────────────────────────────────────────
GC_NET_INTERFACE=eth0

# ─── Encryption ──────────────────────────────────────
GC_ENCRYPTION_KEY=

# ─── Layer 4 Proxy ──────────────────────────────
# GC_L4_BLOCKED_PORTS=80,443,2019,3000,51820
# GC_L4_MAX_PORT_RANGE=100

# ─── Intervals (ms) ─────────────────────────────
# GC_TRAFFIC_INTERVAL=60000
# GC_PEER_POLL_INTERVAL=30000
# GC_CADDY_SYNC_DELAY=5000
# GC_SHUTDOWN_TIMEOUT=10000

# ─── Timeouts (ms) ──────────────────────────────
# GC_WG_COMMAND_TIMEOUT=10000
# GC_CADDY_API_TIMEOUT=10000
# GC_WEBHOOK_TIMEOUT=10000
# GC_MONITOR_HTTP_TIMEOUT=10000
# GC_MONITOR_TCP_TIMEOUT=5000

# ─── Client Update ───────────────────────────
# GC_CLIENT_REPO_COMMUNITY=CallMeTechie/GateControl-Community-Client
# GC_CLIENT_REPO_PRO=CallMeTechie/GateControl-Pro-Client
# GC_CLIENT_GITHUB_TOKEN=ghp_xxxxxxxxxxxxxxxxxxxx  (nötig für private Repos)

# ─── License ──────────────────────────────────
# GC_LICENSE_KEY=GATE-XXXX-XXXX-XXXX
# GC_LICENSE_SIGNING_KEY=
# GC_LICENSE_SERVER=https://callmetechie.de/api/licenses/validate

# ─── RDP ─────────────────────────────────────────────────────
# Public host for gateway RDP routes (raw L4 listen port). Only needed when the
# admin UI sits behind Cloudflare/NAT/reverse-proxy and the baseUrl host does NOT
# pass the raw RDP listen port through. Empty = the baseUrl host is used.
GC_RDP_PUBLIC_HOST=