turn-stack/.env.default at main · yboujraf/turn-stack · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
# =========================
# SYSTEM / GLOBAL
# =========================
SYS_HOSTNAME=vmi1930375
SYS_TIMEZONE=UTC
SYS_ADMIN_EMAIL=you@example.com

# =========================
# CLOUDFLARE (DNS-01)
# =========================
CF_API_TOKEN=
CF_EMAIL=
# Seconds to wait for DNS TXT propagation (per component may override)
CF_PROPAGATION_SECONDS=30

# =========================
# VDO.NINJA
# =========================
VDO_ENABLE=true
VDO_DOMAIN=ninja.example.com
VDO_NOBRANDING=true
# Basic Auth (optional): space-separated "user:pass"; empty pass => random
VDO_AUTH_ENABLE=true
VDO_AUTH_USERS="admin: viewer:"
VDO_AUTH_REALM_TEMPLATE="%HOSTNAME% — restricted"
VDO_PROPAGATION_SECONDS=30

# =========================
# TURN (coturn)
# =========================
TURN_ENABLE=true
TURN_DOMAIN=turn.example.com
TURN_REALM=example.com
TURN_USER=testuser
TURN_PASS=supersecret
TURN_MIN_PORT=49152
TURN_MAX_PORT=65535
TURN_PROPAGATION_SECONDS=30

# =========================
# BROADCAST-BOX
# =========================
BBOX_ENABLE=true
BBOX_DOMAIN=live.example.com
BBOX_INGEST_MODE=whip   # whip | rtmp
# Basic Auth (optional)
BBOX_AUTH_ENABLE=true
BBOX_AUTH_USERS="admin: viewer:"
BBOX_AUTH_REALM_TEMPLATE="%HOSTNAME% — restricted"
BBOX_PROPAGATION_SECONDS=30

# =========================
# GRAFANA (reverse-proxied via Nginx)
# =========================
MON_ENABLE=true
MON_DOMAIN=grafana.example.com
# Optional extra Basic Auth in front of Grafana
MON_AUTH_ENABLE=false
MON_AUTH_USERS="ops:"
MON_AUTH_REALM_TEMPLATE="%HOSTNAME% — restricted"
MON_PROPAGATION_SECONDS=30