ec98a83b48
Both configs defined a second secret in a later section starting the numbering over, so CFG_GITEA_METRICS_TOKEN_1 and CFG_GITEA_ADMIN_PASSWORD_1 both read RANDOMIZEDPASSWORD1 — and the replacer generates one value per distinct placeholder and seds every occurrence, so the two came out identical. Same for Invidious's HMAC key and admin password. Predates the slot rename. Currently latent, since neither admin password is consumed by anything, but it would silently pair a live secret with whatever gets wired to the other key. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
73 lines
3.7 KiB
Plaintext
Executable File
73 lines
3.7 KiB
Plaintext
Executable File
#
|
|
# =============================================================================
|
|
# GENERAL CONFIGURATION
|
|
# =============================================================================
|
|
# APP_NAME = name of application for use in scripts
|
|
# COMPOSE_FILE = default for no app_name in docker-compose file name, app if there is
|
|
# BACKUP = if true, include this application in backup operations
|
|
# UPDATE_TYPE = auto: new image builds are applied automatically (a recovery snapshot is taken first), manual: only when you press Update
|
|
# HEALTHCHECK = if true, default docker health checks for that container will be enabled
|
|
# AUTHELIA = if true, use Authelia authentication, if false turned off.
|
|
# HEADSCALE = options : false, local, remote (see general config). e.g false or local,remote
|
|
#
|
|
CFG_INVIDIOUS_APP_NAME=invidious
|
|
CFG_INVIDIOUS_BACKUP=false
|
|
CFG_INVIDIOUS_BACKUP_STRATEGY=auto
|
|
CFG_INVIDIOUS_UPDATE_TYPE=auto
|
|
CFG_INVIDIOUS_COMPOSE_FILE=default
|
|
CFG_INVIDIOUS_HEALTHCHECK=false
|
|
CFG_INVIDIOUS_AUTHELIA=false
|
|
CFG_INVIDIOUS_HEADSCALE=false
|
|
# HMAC_KEY = signs Invidious tokens/links; auto-generated, fed to the compose
|
|
# via the INVIDIOUS_HMAC_KEY_1_TAG tag (preserved across reinstalls)
|
|
CFG_INVIDIOUS_HMAC_KEY_1=RANDOMIZEDPASSWORD1
|
|
#
|
|
# =============================================================================
|
|
# METADATA
|
|
# =============================================================================
|
|
# CATEGORY = application category for grouping
|
|
# TITLE = display name for the application
|
|
# DESCRIPTION = short description of the application
|
|
# LONG_DESCRIPTION = detailed description of the application
|
|
# URL = source repository or documentation URL
|
|
# ACTIONS = available actions for this application
|
|
#
|
|
CFG_INVIDIOUS_CATEGORY="media"
|
|
CFG_INVIDIOUS_TITLE="Invidious"
|
|
CFG_INVIDIOUS_DESCRIPTION="YouTube Frontend"
|
|
CFG_INVIDIOUS_LONG_DESCRIPTION="Invidious is an alternative front-end to YouTube that focuses on privacy and providing a distraction-free viewing experience"
|
|
CFG_INVIDIOUS_URL="https://github.com/iv-org/invidious"
|
|
CFG_INVIDIOUS_ACTIONS="configure|install|restart|shutdown|uninstall|tools"
|
|
#
|
|
# =============================================================================
|
|
# NETWORK CONFIGURATION
|
|
# =============================================================================
|
|
# DOMAIN = number of domain from the general config, useful when using multiple domains
|
|
# WHITELIST = if true only allow whitelisted ips (see general config), if false allow all
|
|
#
|
|
CFG_INVIDIOUS_DOMAIN=1
|
|
CFG_INVIDIOUS_WHITELIST=false
|
|
CFG_INVIDIOUS_NETWORK=default
|
|
#
|
|
# =============================================================================
|
|
# PORT CONFIGURATION
|
|
# =============================================================================
|
|
# PORT_ = port configuration: app|name|external:internal|access|protocol|login|traefik|webui|description
|
|
# - app: application name
|
|
# - name: service identifier (webui, dns, ssh, etc.)
|
|
# - external:internal: port mapping (external can be 'random' for auto-allocation)
|
|
# - access: 'public' (internet accessible), 'private' (local network only), 'disabled' (not running)
|
|
# - protocol: 'tcp' or 'udp'
|
|
# - login: if true, this port requires basic-auth via Traefik (only meaningful when traefik=true)
|
|
# - traefik: if true, Traefik handles this port (reverse proxy)
|
|
# - webui: if true, this port serves the main web interface
|
|
# - description: human-readable description of the service
|
|
#
|
|
CFG_INVIDIOUS_PORT_1="invidious-service|webui|random:3000|public|tcp|false|true|true|Web Interface||invidious"
|
|
|
|
# AUTH_PROFILE = capability tier for the WebUI auth tools (single_password | user_password | multi_user)
|
|
CFG_INVIDIOUS_AUTH_PROFILE=multi_user
|
|
CFG_INVIDIOUS_ADMIN_USER=
|
|
CFG_INVIDIOUS_ADMIN_EMAIL=
|
|
CFG_INVIDIOUS_ADMIN_PASSWORD_1=RANDOMIZEDPASSWORD2
|