.env-dist

DRAWIO_TRAEFIK_HOST=diagram.example.com
DRAWIO_INSTANCE=

# Filter access by IP address source range (CIDR):
##Disallow all access: 0.0.0.0/32
##Allow all access: 0.0.0.0/0
DRAWIO_IP_SOURCERANGE=0.0.0.0/0

# HTTP Basic Authentication:
# Use `make config` to fill this in properly, or set this to blank to disable.
DRAWIO_HTTP_AUTH=

# OAUTH2
# Set to `true` to use OpenID/OAuth2 authentication via the
# traefik-forward-auth service in d.rymcg.tech.
# Using OpenID/OAuth2 will require login to access your app,
# but it will not affect what a successfully logged-in person can do in your
# app. If your app has built-in authentication and can check the user
# header that traefik-forward-auth sends, then your app can limit what the
# logged-in person can do in the app. But if your app can't check the user
# header, or if your app doesn't have built-in authentication at all, then
# any person with an account on your Gitea server can log into your app and
# have full access.
DRAWIO_OAUTH2=
# In addition to Oauth2 authentication, you can configure basic authorization
# by entering which authorization group can log into your app. You create
# groups of email addresses in the `traefik` folder by running `make groups`. 
DRAWIO_OAUTH2_AUTHORIZED_GROUP=


# Mutual TLS (mTLS):
# Set true or false. If true, all clients must present a certificate signed by Step-CA:
DRAWIO_MTLS_AUTH=false
# Enter a comma separated list of client domains allowed to connect via mTLS.
# Wildcards are allowed and encouraged on a per-app basis:
DRAWIO_MTLS_AUTHORIZED_CERTS=*.clients.drawio.example.com


DRAWIO_CSP_HEADER=
DRAWIO_VIEWER_URL=
DRAWIO_LIGHTBOX_URL=
DRAWIO_CONFIG=
DRAWIO_GOOGLE_CLIENT_ID=
DRAWIO_GOOGLE_APP_ID=
DRAWIO_GOOGLE_CLIENT_SECRET=
DRAWIO_GOOGLE_VIEWER_CLIENT_ID=
DRAWIO_GOOGLE_VIEWER_APP_ID=
DRAWIO_GOOGLE_VIEWER_CLIENT_SECRET=
DRAWIO_MSGRAPH_CLIENT_ID=
DRAWIO_MSGRAPH_CLIENT_SECRET=
DRAWIO_GITLAB_ID=
DRAWIO_GITLAB_SECRET=
DRAWIO_GITLAB_URL=
DRAWIO_CLOUD_CONVERT_APIKEY=
DRAWIO_CACHE_DOMAIN=
DRAWIO_MEMCACHED_ENDPOINT=
DRAWIO_PUSHER_MODE=
DRAWIO_IOT_ENDPOINT=
DRAWIO_IOT_CERT_PEM=
DRAWIO_IOT_PRIVATE_KEY=
DRAWIO_IOT_ROOT_CA=
DRAWIO_MXPUSHER_ENDPOINT=