Container Port: 8080

Ziel

8080

Standard

8080

Wert

8080

Postgres database connection URL

Ziel

DATABASE_URL

Standard

postgres://POSTGRES_USER:POSTGRES_PASSWORD@POSTGRES_IP:5432/AuthPortaldb?sslmode=disable

Wert

postgres://POSTGRES_USER:POSTGRES_PASSWORD@POSTGRES_IP:5432/AuthPortaldb?sslmode=disable

Public URL of this service. If using HTTPS, cookies will be marked Secure.

Ziel

APP_BASE_URL

Standard

http://IP_ADDRESS:PORT

Wert

http://IP_ADDRESS:PORT

Comma-separated list of trusted proxy CIDR ranges for forwarded headers

Ziel

TRUSTED_PROXY_CIDRS

Type of media server to authenticate against

Ziel

MEDIA_SERVER

Standard

plex|emby|jellyfin

HMAC secret for JWT cookie

Ziel

SESSION_SECRET

Base64 32-byte key for sealing tokens at rest

Ziel

DATA_KEY

Set to 1 to force Secure on cookies (behind TLS/ingress)

Ziel

FORCE_SECURE_COOKIE

Standard

0|1

Set to 1 to force HSTS headers even if APP_BASE_URL is http (when TLS terminates upstream)

Ziel

FORCE_HSTS

Standard

0|1

External URL on authorized page

Ziel

LOGIN_EXTRA_LINK_URL

Text for external URL on authorized page

Ziel

LOGIN_EXTRA_LINK_TEXT

Email address for unauthorized page request access link

Ziel

UNAUTH_REQUEST_EMAIL

Subject for unauthorized page request access email

Ziel

UNAUTH_REQUEST_SUBJECT

Token from Plex server owner; used to validate server membership.

Ziel

PLEX_OWNER_TOKEN

Machine ID of your Plex server (preferred over name).

Ziel

PLEX_SERVER_MACHINE_ID

Optional: Plex server name (used if machine ID not set).

Ziel

PLEX_SERVER_NAME

URL of your Emby server (e.g. http://IP:PORT).

Ziel

EMBY_SERVER_URL

API key from your Emby server.

Ziel

EMBY_API_KEY

Name of the Emby application (for client headers).

Ziel

EMBY_APP_NAME

Standard

AuthPortal

Wert

AuthPortal

Version of the Emby application (for client headers).

Ziel

EMBY_APP_VERSION

URL of your Jellyfin server (e.g. http://IP:PORT).

Ziel

JELLYFIN_SERVER_URL

API key from your Jellyfin server.

Ziel

JELLYFIN_API_KEY

Name of the Jellyfin application (for client headers).

Ziel

JELLYFIN_APP_NAME

Standard

AuthPortal

Wert

AuthPortal

Version of the Jellyfin application (for client headers).

Ziel

JELLYFIN_APP_VERSION

PEM-encoded private key for OIDC ID token signing

Ziel

OIDC_SIGNING_KEY

Issuer URL for OIDC provider (should match APP_BASE_URL)

Ziel

OIDC_ISSUER_URL

Standard

http://IP_ADDRESS:PORT

Wert

http://IP_ADDRESS:PORT

Optional, comma-separated allow-list for absolute OIDC redirect_uri hosts

Ziel

TRUSTED_REDIRECT_HOSTS

Logging level

Ziel

LOG_LEVEL

Standard

INFO|DEBUG|WARN|ERROR