Initial curated DockDeck source from 26772208f608782e88c736dc70878e7b5abd3916

.env.example

@@ -0,0 +1,118 @@
+# Application (local-only by default)
+HOST=127.0.0.1
+PORT=3000
+DATABASE_PATH=./data/dockdeck.db
+INTEGRATION_ENV_PATH=./data/integrations.env
+POLLING_INTERVAL_MS=30000
+
+# Optional operator authentication (HTTP Basic). Off by default - set both
+# to require login. This dashboard holds read credentials for several other
+# services (see README), so enabling this is strongly recommended for any
+# deployment reachable beyond a fully trusted single-user LAN.
+# Generate DOCKDECK_OPERATOR_PASSWORD_HASH without placing the password in argv:
+#   printf '%s' "$DOCKDECK_PASSWORD" | node scripts/hash-operator-password.mjs
+DOCKDECK_OPERATOR_USER=
+DOCKDECK_OPERATOR_PASSWORD_HASH=
+
+# Docker Compose publication. Keep loopback unless an authenticated trusted-LAN
+# or HTTPS reverse-proxy deployment is intentional.
+DOCKDECK_BIND_ADDRESS=127.0.0.1
+DOCKDECK_PORT=1218
+
+# Optional image identity overrides for manual Compose builds. Controller
+# metadata supplies GITEA_COMMIT_SHA and, once AppOps exports it, APPOPS_BUILD_DATE.
+# Otherwise set DOCKDECK_BUILD_DATE as canonical UTC ISO with optional .SSS;
+# full-revision builds fail closed when only the development epoch is available.
+DOCKDECK_BUILD_REVISION=
+DOCKDECK_BUILD_DATE=
+DOCKDECK_BUILD_SOURCE=jens/dockdeck
+DOCKDECK_INTERNAL_SUBNET=172.31.240.0/28
+DOCKDECK_EGRESS_SUBNET=172.31.240.16/28
+
+# Discovery. MOCK_DISCOVERY is intended for local development and tests only.
+MOCK_DISCOVERY=true
+APPOPS_URL=
+DOCKER_PROXY_URL=
+UNRAID_TEMPLATES_PATH=/unraid-templates
+UNRAID_ICONS_SOURCE_PATH=/unraid-icons-source
+UNRAID_ICONS_PATH=/unraid-icons-cache
+UNRAID_ICONS_DIR=/boot/config/plugins/dockerMan/images
+UNRAID_HOST=host.local
+UNRAID_URL=http://host.local:5000
+UNRAID_RUNTIME_PATH=/unraid-runtime
+UNRAID_HWMON_PATH=/host-hwmon
+UNRAID_CPUINFO_PATH=/host-proc/cpuinfo
+UNRAID_MEMINFO_PATH=/host-proc/meminfo
+UNRAID_UPS_STATUS_PATH=
+
+# Optional read-only Nginx Proxy Manager connection. Keep credentials server-side.
+NPM_URL=
+NPM_TOKEN=
+NPM_USERNAME=
+NPM_PASSWORD=
+
+# Optional provider-aware widget APIs. Use dedicated read-only or minimum-scope
+# credentials where the provider supports them. Values never reach the browser.
+ADGUARD_URL=
+ADGUARD_USERNAME=
+ADGUARD_PASSWORD=
+PLEX_URL=
+PLEX_TOKEN=
+IMMICH_URL=
+IMMICH_API_KEY=
+HOME_ASSISTANT_URL=
+HOME_ASSISTANT_TOKEN=
+OLLAMA_URL=
+GLANCES_URL=
+TAUTULLI_URL=
+TAUTULLI_API_KEY=
+PAPERLESS_URL=
+PAPERLESS_TOKEN=
+SONARR_URL=
+SONARR_API_KEY=
+RADARR_URL=
+RADARR_API_KEY=
+LIDARR_URL=
+LIDARR_API_KEY=
+GITEA_WIDGET_URL=
+GITEA_WIDGET_TOKEN=
+JELLYFIN_URL=
+JELLYFIN_API_KEY=
+SEERR_URL=
+SEERR_API_KEY=
+PROWLARR_URL=
+PROWLARR_API_KEY=
+AUTHENTIK_URL=
+AUTHENTIK_TOKEN=
+PORTAINER_URL=
+PORTAINER_API_KEY=
+GRAFANA_URL=
+GRAFANA_TOKEN=
+PROMETHEUS_URL=
+NEXTCLOUD_URL=
+NEXTCLOUD_USERNAME=
+NEXTCLOUD_APP_PASSWORD=
+AUDIOBOOKSHELF_URL=
+AUDIOBOOKSHELF_TOKEN=
+NETDATA_URL=
+PEERTUBE_URL=
+
+# Apps whose native authentication requires non-GET requests can use a tiny
+# read-only bridge returning { "summary": "...", "stats": [{ "label": "...", "value": "..." }] }.
+DELUGE_METRICS_URL=
+DELUGE_METRICS_TOKEN=
+QBITTORRENT_METRICS_URL=
+QBITTORRENT_METRICS_TOKEN=
+JDOWNLOADER_METRICS_URL=
+JDOWNLOADER_METRICS_TOKEN=
+TDARR_METRICS_URL=
+TDARR_METRICS_TOKEN=
+BAZARR_METRICS_URL=
+BAZARR_METRICS_TOKEN=
+VAULTWARDEN_METRICS_URL=
+VAULTWARDEN_METRICS_TOKEN=
+
+# Optional one-time private repository initialization
+GITEA_URL=
+GITEA_OWNER=
+GITEA_TOKEN=