Primary persistent directory for PostgreSQL, Redis, DKIM keys, uploads, generated JWT keys, and application state.

目标

/appdata

默认值

/mnt/user/appdata/simplelogin-aio

价值

/mnt/user/appdata/simplelogin-aio

Persistent directory for your GnuPG keyring and optional server-generated PGP signing keys.

目标

/pgp

默认值

/mnt/user/appdata/simplelogin-aio/pgp

Optional host path mounted at /custom-assets for advanced file-based settings such as custom words lists, OpenID keys, Paddle public keys, or imported PGP material.

目标

/custom-assets

Port used by the SimpleLogin web UI.

目标

7777

默认值

7777

价值

7777

Inbound SMTP port. Forward TCP 25 from your router or firewall to the Unraid host if you want aliases to receive internet mail.

目标

25

默认值

25

价值

25

Canonical HTTPS URL for the dashboard, for example https://app.example.com. This does not need to be the same as your SMTP/MX hostname.

目标

URL

默认值

https://app.example.com

Real public alias domain, for example example.com. Do not use a private-only tailnet domain here. First-account registration must use a separate existing mailbox, not this alias domain.

目标

EMAIL_DOMAIN

默认值

example.com

Working mailbox used for system mail, for example support@example.com. Use an address that already exists.

目标

SUPPORT_EMAIL

默认值

support@example.com

Long random app secret. Generate with: openssl rand -hex 32

目标

FLASK_SECRET

Outbound mail mode. Choose one of the built-in dropdown values only: direct, brevo, protonmail, gmail, mailgun, or custom. Use a relay provider if your ISP blocks outbound TCP 25.

目标

RELAY_MODE

默认值

direct|brevo|protonmail|gmail|mailgun|custom

价值

direct

Brevo SMTP username, usually your account email. Required when RELAY_MODE=brevo.

目标

BREVO_USERNAME

Brevo SMTP key or password. Required when RELAY_MODE=brevo.

目标

BREVO_PASSWORD

Proton SMTP token. Required when RELAY_MODE=protonmail. The username stays SUPPORT_EMAIL.

目标

PROTONMAIL_TOKEN

Full Gmail address used for relay auth. Required when RELAY_MODE=gmail.

目标

GMAIL_USERNAME

16-character Gmail app password. Required when RELAY_MODE=gmail.

目标

GMAIL_APP_PASSWORD

Mailgun SMTP username, usually postmaster@yourdomain. Required when RELAY_MODE=mailgun.

目标

MAILGUN_USERNAME

Mailgun SMTP password. Required when RELAY_MODE=mailgun.

目标

MAILGUN_PASSWORD

Required when RELAY_MODE=custom. Example: [smtp.provider.com]:587

目标

CUSTOM_RELAYHOST

SMTP username for your custom relay. Required when RELAY_MODE=custom.

目标

CUSTOM_USERNAME

SMTP password for your custom relay. Required when RELAY_MODE=custom.

目标

CUSTOM_PASSWORD

Leave blank for the bundled database. When set to an external host, the bundled PostgreSQL stays idle. Format: postgresql://user:pass@host:5432/dbname

目标

DB_URI

Leave blank for the bundled Redis. When set to an external host, the bundled Redis stays idle. Format: redis://:pass@host:6379/0

目标

REDIS_URL

Advanced escape hatch. Leave at 127.0.0.1 to keep the bundled Postfix path.

目标

POSTFIX_SERVER

默认值

127.0.0.1

价值

127.0.0.1

Advanced escape hatch. Leave at 25 for the bundled Postfix path.

目标

POSTFIX_PORT

默认值

25

价值

25

Comma-separated resolvers used for lookups, for example 1.1.1.1,1.0.0.1.

目标

NAMESERVERS

默认值

1.1.1.1,1.0.0.1

价值

1.1.1.1,1.0.0.1

Optional temp directory path inside the container or a mounted path.

目标

TEMP_DIR

Advanced path override for the words file used for random alias generation. Use /custom-assets if you mount your own file.

目标

WORDS_FILE_PATH

默认值

/code/local_data/test_words.txt

价值

/code/local_data/test_words.txt

Leave true for local file storage inside /appdata.

目标

LOCAL_FILE_UPLOAD

默认值

true|false

价值

true

GnuPG home directory path used for PGP features.

目标

GNUPGHOME

默认值

/pgp

价值

/pgp

Optional partner token secret. Generate with: openssl rand -hex 32. Blank uses FLASK_SECRET.

目标

PARTNER_API_TOKEN_SECRET

Recommended default. Keep true to block public sign-up. Temporarily switch to false only while creating a first account, then set true again and restart.

目标

DISABLE_REGISTRATION

默认值

true|false

价值

true

Recommended for self-hosted installs.

目标

DISABLE_ONBOARDING

默认值

true|false

价值

true

Recommended for self-hosted installs to allow cleaner aliases without the random suffix.

目标

DISABLE_ALIAS_SUFFIX

默认值

true|false

价值

true

Enable SPF enforcement using the extra headers provided by Postfix.

目标

ENFORCE_SPF

默认值

true|false

价值

true

For testing only. When true, email bodies are logged instead of sent.

目标

NOT_SEND_EMAIL

默认值

false|true

价值

false

Optional colored log output for debugging.

目标

COLOR_LOG

General stats and admin alert email recipient. This is not a login credential.

目标

ADMIN_EMAIL

Display name used alongside SUPPORT_EMAIL.

目标

SUPPORT_NAME

Postmaster email used by some mail-related features.

目标

POSTMASTER

Max number of emails a non-premium user can generate.

目标

MAX_NB_EMAIL_FREE_PLAN

默认值

10

价值

10

Alias creation rate limit. Example: 100/day;50/hour;5/minute

目标

ALIAS_LIMIT

Optional automatic alias disable behavior.

目标

ALIAS_AUTOMATIC_DISABLE

JSON list of allowed redirect domains. Example: ["app.example.com"]

目标

ALLOWED_REDIRECT_DOMAINS

Optional landing page URL shown by the app.

目标

LANDING_PAGE_URL

Optional status page URL shown by the app.

目标

STATUS_PAGE_URL

hCaptcha secret key from your hCaptcha site. Set both hCaptcha fields to enable.

目标

HCAPTCHA_SECRET

hCaptcha site key from your hCaptcha site. Set both hCaptcha fields to enable.

目标

HCAPTCHA_SITEKEY

Leave blank to auto-use mail.EMAIL_DOMAIN. Set this only if your MX host should be something else, for example [(10, "mx.example.com.")].

目标

EMAIL_SERVERS_WITH_PRIORITY

JSON list of extra alias domains. Example: ["example.net","example.org"]

目标

OTHER_ALIAS_DOMAINS

Full alias-domain override as a JSON list. If set, it replaces OTHER_ALIAS_DOMAINS.

目标

ALIAS_DOMAINS

JSON list of premium-only domains. Example: ["vip.example.com"]

目标

PREMIUM_ALIAS_DOMAINS

Alias domain used when creating the first alias.

目标

FIRST_ALIAS_DOMAIN

VERP bounce prefix. Must end with + if used.

目标

BOUNCE_PREFIX

VERP bounce suffix. Must start with + if used.

目标

BOUNCE_SUFFIX

Reply-phase bounce prefix without a trailing +.

目标

BOUNCE_PREFIX_FOR_REPLY_PHASE

GitHub OAuth app client ID.

目标

GITHUB_CLIENT_ID

GitHub OAuth app client secret.

目标

GITHUB_CLIENT_SECRET

Google OAuth client ID.

目标

GOOGLE_CLIENT_ID

Google OAuth client secret.

目标

GOOGLE_CLIENT_SECRET

Facebook OAuth client ID.

目标

FACEBOOK_CLIENT_ID

Facebook OAuth client secret.

目标

FACEBOOK_CLIENT_SECRET

Proton OAuth client ID.

目标

PROTON_CLIENT_ID

Proton OAuth client secret.

目标

PROTON_CLIENT_SECRET

Proton API base URL override.

目标

PROTON_BASE_URL

Certificate verification for Proton integration.

目标

PROTON_VALIDATE_CERTS

默认值

true|false

价值

true

Enable Proton login integration.

目标

CONNECT_WITH_PROTON

Cookie name for Proton login integration.

目标

CONNECT_WITH_PROTON_COOKIE_NAME

Font Awesome icon slug for generic OIDC login button.

目标

CONNECT_WITH_OIDC_ICON

OIDC discovery URL, usually ending in /.well-known/openid-configuration.

目标

OIDC_WELL_KNOWN_URL

Space-separated OIDC scopes. Default works for most providers.

目标

OIDC_SCOPES

默认值

openid email profile

价值

openid email profile

OIDC user-info field used for display name.

目标

OIDC_NAME_FIELD

默认值

name

价值

name

OIDC client ID.

目标

OIDC_CLIENT_ID

OIDC client secret.

目标

OIDC_CLIENT_SECRET

Set to 1 to enable SimpleLogin as an OpenID provider.

目标

ENABLE_OIDC_SERVER

默认值

0|1

价值

0

Optional OpenID private key path. Blank auto-generates when ENABLE_OIDC_SERVER=1.

目标

OPENID_PRIVATE_KEY_PATH

Optional OpenID public key path matching the private key above.

目标

OPENID_PUBLIC_KEY_PATH

Apple sign-in API secret.

目标

APPLE_API_SECRET

Apple sign-in secret for the native Mac app.

目标

MACAPP_APPLE_API_SECRET

Sentry DSN for backend error tracking.

目标

SENTRY_DSN

Optional separate Sentry DSN for front-end error tracking.

目标

SENTRY_FRONT_END_DSN

Plausible Analytics host.

目标

PLAUSIBLE_HOST

Plausible tracked domain.

目标

PLAUSIBLE_DOMAIN

Optional Flask profiler sqlite path.

目标

FLASK_PROFILER_PATH

Optional Flask profiler password.

目标

FLASK_PROFILER_PASSWORD

Set to 1 to enable SpamAssassin integration.

目标

ENABLE_SPAM_ASSASSIN

默认值

0|1

价值

0

SpamAssassin server host or IP.

目标

SPAMASSASSIN_HOST

How often to check Have I Been Pwned data.

目标

HIBP_SCAN_INTERVAL_DAYS

默认值

7

价值

7

JSON list of HIBP API keys. Example: ["key1","key2"]

目标

HIBP_API_KEYS

Set to 1 to auto-generate a PGP server key pair.

目标

AUTO_GENERATE_PGP

默认值

0|1

价值

0

Optional path to a private PGP key used to sign forwarding emails. Use /custom-assets or /pgp if you provide your own key.

目标

PGP_SENDER_PRIVATE_KEY_PATH

Advanced DKIM private key path override. Leave at /dkim.key for the wrapper-managed default.

目标

DKIM_PRIVATE_KEY_PATH

默认值

/dkim.key

价值

/dkim.key

Bucket name used by upstream S3-backed features.

目标

BUCKET

AWS or S3-compatible access key ID.

目标

AWS_ACCESS_KEY_ID

AWS or S3-compatible secret access key.

目标

AWS_SECRET_ACCESS_KEY

AWS region.

目标

AWS_REGION

Paddle vendor ID.

目标

PADDLE_VENDOR_ID

Paddle monthly product ID.

目标

PADDLE_MONTHLY_PRODUCT_ID

Paddle yearly product ID.

目标

PADDLE_YEARLY_PRODUCT_ID

Path to your Paddle public key file, for example /custom-assets/paddle_public.pem.

目标

PADDLE_PUBLIC_KEY_PATH

Paddle auth code.

目标

PADDLE_AUTH_CODE

Coinbase webhook secret.

目标

COINBASE_WEBHOOK_SECRET

Coinbase checkout ID.

目标

COINBASE_CHECKOUT_ID

Coinbase API key.

目标

COINBASE_API_KEY

Coinbase yearly price value.

目标

COINBASE_YEARLY_PRICE

Expert-only alternate dotenv file path. Usually leave blank and use the template fields instead.

目标

CONFIG

Optional monitoring report email recipient.

目标

MONITORING_EMAIL

Optional address that receives unsubscribe requests.

目标

UNSUBSCRIBER

Legacy alias for unsubscribe routing.

目标

OLD_UNSUBSCRIBER

Comma-separated users allowed to use HTTP unsubscribe.

目标

USERS_WITH_HTTP_UNSUBSCRIBE

Legacy free-plan alias cap used for old accounts.

目标

MAX_NB_EMAIL_OLD_FREE_PLAN

Optional PostgreSQL application_name override.

目标

DB_CONN_NAME

Optional custom S3-compatible endpoint URL.

目标

AWS_ENDPOINT_URL

JSON list of extra Paddle monthly product IDs. Example: [12345,67890]

目标

PADDLE_MONTHLY_PRODUCT_IDS

JSON list of extra Paddle yearly product IDs. Example: [12345,67890]

目标

PADDLE_YEARLY_PRODUCT_IDS

Optional Paddle coupon product ID.

目标

PADDLE_COUPON_ID

Optional Proton integration header name override.

目标

PROTON_EXTRA_HEADER_NAME

Optional Proton integration header value.

目标

PROTON_EXTRA_HEADER_VALUE

Presence-based upstream flag. Set true to prevent linked Proton account changes.

目标

PROTON_PREVENT_CHANGE_LINKED_ACCOUNT

默认值

false|true

价值

false

Optional Sentry trace sample rate. Example: 0.001

目标

SENTRY_TRACE_RATE

Comma-separated backup outbound SMTP servers.

目标

POSTFIX_BACKUP_SERVERS

Presence-based upstream flag. Set true to use Postfix submission with TLS on port 587.

目标

POSTFIX_SUBMISSION_TLS

默认值

false|true

价值

false

Postfix send timeout in seconds.

目标

POSTFIX_TIMEOUT

Postfix connect timeout in seconds.

目标

POSTFIX_CONNECT_TIMEOUT

Comma-separated Proton MX servers.

目标

PROTON_MX_SERVERS

Comma-separated Proton email domains.

目标

PROTON_EMAIL_DOMAINS

Presence-based upstream flag for niche local PGP loading behavior.

目标

LOAD_PGP_EMAIL_HANDLER

默认值

false|true

价值

false

Presence-based upstream flag to validate Apple webhook shared secret.

目标

APPLE_WEBHOOK_SECRET_CHECK_ENABLED

默认值

false|true

价值

false

SpamAssassin spam score threshold for forwarded mail.

目标

MAX_SPAM_SCORE

SpamAssassin spam score threshold for reply-phase mail.

目标

MAX_REPLY_PHASE_SPAM_SCORE

Optional signer address used for outgoing encrypted email.

目标

PGP_SIGNER

Formatted no-reply address override.

目标

NOREPLY

Formatted partner no-reply address override.

目标

PARTNER_NOREPLY

Have I Been Pwned requests-per-minute limit.

目标

HIBP_API_RPM

Optional HIBP behavior override for partner aliases.

目标

HIBP_SKIP_PARTNER_ALIAS

Optional directory where unsent emails are stored.

目标

SAVE_UNSENT_DIR

Presence-based upstream flag indicating DKIM signing is handled by Rspamd.

目标

RSPAMD_SIGN_DKIM

默认值

false|true

价值

false

Optional Twilio auth token for phone-related integrations.

目标

TWILIO_AUTH_TOKEN

Optional phone provider secret.

目标

PHONE_PROVIDER_1_SECRET

Optional phone provider header name.

目标

PHONE_PROVIDER_2_HEADER

Optional phone provider secret.

目标

PHONE_PROVIDER_2_SECRET

Optional Zendesk host for support integrations.

目标

ZENDESK_HOST

Optional Zendesk API token.

目标

ZENDESK_API_TOKEN

Presence-based upstream flag to enable Zendesk integration.

目标

ZENDESK_ENABLED

默认值

false|true

价值

false

Presence-based upstream flag to enable DMARC checks.

目标

DMARC_CHECK_ENABLED

默认值

false|true

价值

false

VERP prefix override.

目标

VERP_PREFIX

Custom VERP secret. Generate with: openssl rand -hex 32. Must be at least 32 chars.

目标

VERP_EMAIL_SECRET

Optional transactional bounce prefix.

目标

TRANSACTIONAL_BOUNCE_PREFIX

Optional transactional bounce suffix.

目标

TRANSACTIONAL_BOUNCE_SUFFIX

Alias transfer token secret. Generate with: openssl rand -hex 32

目标

ALIAS_TRANSFER_TOKEN_SECRET

Optional upstream behavior override for free-user contact creation.

目标

DISABLE_CREATE_CONTACTS_FOR_FREE_USERS

Length of generated alias random suffix.

目标

ALIAS_RAND_SUFFIX_LENGTH

Optional event webhook destination URL.

目标

EVENT_WEBHOOK

Presence-based upstream flag to skip SSL verification for the event webhook.

目标

EVENT_WEBHOOK_SKIP_VERIFY_SSL

默认值

false|true

价值

false

Presence-based upstream flag to disable event webhooks.

目标

EVENT_WEBHOOK_DISABLE

默认值

false|true

价值

false

Comma-separated user IDs allowed to emit event webhooks.

目标

EVENT_WEBHOOK_ENABLED_USER_IDS

Optional dedicated DB URI for the event listener.

目标

EVENT_LISTENER_DB_URI

Maximum number of API keys per user.

目标

MAX_API_KEYS

Optional memory store URI override.

目标

MEM_STORE_URI

Recovery-code HMAC secret. Generate with: openssl rand -hex 32. Must be at least 16 chars.

目标

RECOVERY_CODE_HMAC_SECRET

Rspamd score threshold for quarantining DMARC-failed email.

目标

MIN_RSPAMD_SCORE_FOR_FAILED_DMARC

Presence-based upstream flag to replace all reverse aliases.

目标

ENABLE_ALL_REVERSE_ALIAS_REPLACEMENT

默认值

false|true

价值

false

Maximum reverse aliases replaced when the related feature is enabled.

目标

MAX_NB_REVERSE_ALIAS_REPLACEMENT

Presence-based upstream flag to disable rate limiting.

目标

DISABLE_RATE_LIMIT

默认值

false|true

价值

false

Free-user alias create rate limits in hits,seconds:hits,seconds format.

目标

ALIAS_CREATE_RATE_LIMIT_FREE

Paid-user alias create rate limits in hits,seconds:hits,seconds format.

目标

ALIAS_CREATE_RATE_LIMIT_PAID

Single-alias restore rate limits in hits,seconds:hits,seconds format.

目标

ALIAS_RESTORE_ONE_RATE_LIMIT

Bulk alias restore rate limits in hits,seconds:hits,seconds format.

目标

ALIAS_RESTORE_ALL_RATE_LIMIT

Maximum daily bounces before automatic handling triggers.

目标

MAX_BOUNCES_1D

Maximum weekly bounces before automatic handling triggers.

目标

MAX_BOUNCES_1W

Expert partner mapping in key=value;key=value format. Example: a.com=x.com;b.com=y.com

目标

PARTNER_DNS_CUSTOM_DOMAINS

Expert validation prefixes in key=value;key=value format.

目标

PARTNER_CUSTOM_DOMAIN_VALIDATION_PREFIXES

Optional mailbox verification override code for controlled environments.

目标

MAILBOX_VERIFICATION_OVERRIDE_CODE

Maximum audit log retention in days.

目标

AUDIT_LOG_MAX_DAYS

Days before trashed aliases are purged.

目标

ALIAS_TRASH_DAYS

Comma-separated allowed OAuth callback schemes.

目标

ALLOWED_OAUTH_SCHEMES

Maximum forward recipients per email.

目标

MAX_EMAIL_FORWARD_RECIPIENTS

Hex-encoded master encryption key. Generate with: openssl rand -hex 32

目标

MASTER_ENC_KEY_HEX

Hex-encoded MAC key. Generate with: openssl rand -hex 32

目标

MAC_KEY_HEX

Hex-encoded HKDF salt. Generate with: openssl rand -hex 32

目标

ABUSER_HKDF_SALT

Comma-separated invalid MX IPs ignored by validation logic.

目标

INVALID_MX_IPS

Presence-based upstream flag to use the Rust PGP implementation.

目标

USE_RUST_PGP

默认值

false|true

价值

false

Maximum SMTP message size in bytes.

目标

SMTP_SIZE_LIMIT

Optional partner support URL shown by the app.

目标

PARTNER_SUPPORT_URL

Admin FIDO requirement. Choose one of the built-in dropdown values only: none, any, or hardware. Leave this at none unless you already intend to enforce admin FIDO or security keys.

目标

ADMIN_FIDO_REQUIRED

默认值

none|any|hardware

价值

none

Admin grace period in seconds before FIDO enforcement.

目标

ADMIN_GRACE_PERIOD

Presence-based upstream flag to drop PGP key attachments on reply.

目标

DROP_PGP_KEY_ATTACHMENTS_ON_REPLY

默认值

false|true

价值

false

Optional UpCloud username for niche upstream integrations.

目标

UPCLOUD_USERNAME

Optional UpCloud password for niche upstream integrations.

目标

UPCLOUD_PASSWORD

Optional UpCloud database ID for niche upstream integrations.

目标

UPCLOUD_DB_ID

Presence-based upstream flag to store transactional emails.

目标

STORE_TRANSACTIONAL_EMAILS

默认值

false|true

价值

false