Port for the Groly web interface.

Cible

3000

Défaut

3000

Valeur

3000

Directory where the SQLite database is stored. The container runs as UID/GID 1000 — make sure this path is owned by user 1000 (run: chown -R 1000:1000 /mnt/user/appdata/groly).

Cible

/app/data

Défaut

/mnt/user/appdata/groly

Valeur

/mnt/user/appdata/groly

Full HTTPS URL of your Groly instance, e.g. https://groly.example.com or your Tailscale hostname. Required — HTTPS is mandatory for offline mode, push notifications, and the barcode scanner.

Username for the initial admin account. Only used on first start. Can be safely deleted from the container afterwards — it is also the user that ADMIN_PASSWORD_RESET will reset if you ever forget your admin password.

Défaut

admin

Valeur

admin

Password for the initial admin account. ONLY used on first start (when no users exist yet). After first start this variable is ignored and can — and should — be deleted from the container template for security. If you ever forget the admin password, use ADMIN_PASSWORD_RESET below instead.

Emergency password reset for the user defined in ADMIN_USERNAME. Leave EMPTY in normal operation. Only set this if you have forgotten your admin password: enter a new password, restart the container, log in, then DELETE this variable. While set, the password is reset on every container start and all existing sessions are invalidated.

Only fill this in if Groly is running behind a reverse proxy (Nginx Proxy Manager, Caddy, Traefik) — set it to X-Forwarded-For. Leave empty if you access Groly directly. Setting this without a reverse proxy will cause login to fail.

VAPID public key for push notifications (optional). Generate a key pair once with: node -e "const wp=require('web-push'); const k=wp.generateVAPIDKeys(); console.log(JSON.stringify(k,null,2))"

VAPID private key for push notifications (optional). Must match VAPID_PUBLIC_KEY.

Must be the same value as VAPID_PUBLIC_KEY. Required for push notifications.

A https:// URL or mailto: address for VAPID identification (e.g. https://your-domain.com). Required for push notifications. Must not be a .local domain.