Port for the Groly web interface.

Objetivo

3000

Por defecto

3000

Valor

3000

Directory where the SQLite database is stored. The container runs as UID/GID 1000 — make sure this path is owned by user 1000 (run: chown -R 1000:1000 /mnt/user/appdata/groly).

Objetivo

/app/data

Por defecto

/mnt/user/appdata/groly

Valor

/mnt/user/appdata/groly

Full HTTPS URL of your Groly instance, e.g. https://groly.example.com or your Tailscale hostname. Required — HTTPS is mandatory for offline mode, push notifications, and the barcode scanner.

Username for the initial admin account. Only used on first start. Can be safely deleted from the container afterwards — it is also the user that ADMIN_PASSWORD_RESET will reset if you ever forget your admin password.

Por defecto

admin

Valor

admin

Password for the initial admin account. ONLY used on first start (when no users exist yet). After first start this variable is ignored and can — and should — be deleted from the container template for security. If you ever forget the admin password, use ADMIN_PASSWORD_RESET below instead.

Emergency password reset for the user defined in ADMIN_USERNAME. Leave EMPTY in normal operation. Only set this if you have forgotten your admin password: enter a new password, restart the container, log in, then DELETE this variable. While set, the password is reset on every container start and all existing sessions are invalidated.

Only fill this in if Groly is running behind a reverse proxy (Nginx Proxy Manager, Caddy, Traefik) — set it to X-Forwarded-For. Leave empty if you access Groly directly. Setting this without a reverse proxy will cause login to fail.

VAPID public key for push notifications (optional). Generate a key pair once with: node -e "const wp=require('web-push'); const k=wp.generateVAPIDKeys(); console.log(JSON.stringify(k,null,2))"

VAPID private key for push notifications (optional). Must match VAPID_PUBLIC_KEY.

Must be the same value as VAPID_PUBLIC_KEY. Required for push notifications.

A https:// URL or mailto: address for VAPID identification (e.g. https://your-domain.com). Required for push notifications. Must not be a .local domain.