cms-SiteForge/.env.example

# 复制为 .env 后更换密码和密钥；不要提交 .env 到版本库
SITEFORGE_PORT=8787
SITEFORGE_ADMIN_PASSWORD=REPLACE_WITH_STRONG_PASSWORD
SITEFORGE_SESSION_SECRET=REPLACE_WITH_64_RANDOM_CHARACTERS
SITEFORGE_COOKIE_SECURE=false

# 只有启用 compose.public.yaml 时才需要填写，先正确设置 DNS 记录
SITEFORGE_DOMAIN=siteforge.example.com

# Enterprise-only (compose.enterprise.yaml)
SITEFORGE_PG_USER=siteforge
SITEFORGE_PG_PASSWORD=GENERATE_STRONG_URL_SAFE_PASSWORD
SITEFORGE_PG_DB=siteforge
# Must be HTTPS and trusted deployment endpoint; never set to an arbitrary user URL
SITEFORGE_DEPLOY_STAGING_URL=
SITEFORGE_DEPLOY_STAGING_SECRET_REF=
SITEFORGE_DEPLOY_PRODUCTION_URL=
SITEFORGE_DEPLOY_PRODUCTION_SECRET_REF=
# Release agent is deployed as an isolated service on the receiving host
SITEFORGE_DEPLOY_SECRET=

# P1 task-queue capacity and safe outbound HTTP policy
SITEFORGE_MAX_PENDING_JOBS=100
SITEFORGE_MAX_PENDING_JOBS_PER_SITE=5
SITEFORGE_OUTBOUND_PORTS=80,443

# V8.5 restricted MySQL importer. Empty allowlists disable MySQL access.
# Example values, only enable an approved server + an actual SELECT-only user.
SITEFORGE_MYSQL_ALLOWED_HOSTS=
SITEFORGE_MYSQL_ALLOWED_TABLES=
# Optional CA path inside Worker. Mount certificate into Worker when using custom CA.
SITEFORGE_MYSQL_CA_FILE=
# Credential names should be secrets in Worker, not plaintext from the browser.
# SITEFORGE_MYSQL_READ_USER=<use Docker secret instead>
# SITEFORGE_MYSQL_READ_PASSWORD=<use Docker secret instead>
# Preferred remote signing secret reference (instead of plaintext _SECRET)
# SITEFORGE_DEPLOY_STAGING_SECRET_REF=env:SITEFORGE_STAGING_TOKEN
# SITEFORGE_STAGING_TOKEN=<independent random 32+ char token, delivered only to Worker>
# SITEFORGE_DEPLOY_PRODUCTION_SECRET_REF=file:siteforge_deploy_production
# Mount /run/secrets/siteforge_deploy_production in Worker using a private Compose override.
# Set SITEFORGE_DEPLOY_SECRET_REF=file:siteforge_deploy_production in the remote Agent.
# Never reuse the same token between staging and production.