Files
Media-Server-Setup/.env.example
Brandyn / Techy 384a7ed552 Per-host group gating in Caddy from X-Authentik-Groups; Discord roles -> Authentik groups policy; domain-level forward auth documented
BOT_REQUIRE_GROUP / LIVE_REQUIRE_GROUP in .env drive a header_regexp matcher after forward_auth
(403 before the app). authentik/discord-roles-to-groups.py syncs Discord roles into groups at
every login so access follows Discord roles without manual edits.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
2026-10-30 23:22:20 -05:00

21 lines
498 B
Plaintext

# copy to .env (configure.py --full generates it) — never commit the real one
AUTHENTIK_SECRET_KEY=
AUTHENTIK_PG_PASS=
AUTHENTIK_TAG=2025.8
WATCH_HOST=watch.example.com
MARIADB_ROOT_PASSWORD=
BOT_DB_NAME=vanguardbot
BOT_DB_USER=bot
BOT_DB_PASSWORD=
DISCORD_BOT_TOKEN=
DISCORD_GUILD_ID=
GIT_HOST=git.example.com
GITEA_DB_PASSWORD=
GITEA_RUNNER_TOKEN=
BOT_HOST=bot.example.com
LIVE_HOST=live.example.com
MAIN_HOST=media.example.com
LIVE_WEBHOOK_URL=
BOT_REQUIRE_GROUP=bot-users
LIVE_REQUIRE_GROUP=