nullbox/.env.example at main · dotlabshq/nullbox · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
```env
# ─── App ──────────────────────────────────────────────────────────────
NEXT_PUBLIC_APP_URL=http://localhost:3000
NEXT_PUBLIC_APP_NAME=nullbox
NODE_ENV=development

# ─── Redis ────────────────────────────────────────────────────────────
# Local: redis://localhost:6379
# Upstash: rediss://:<token>@<host>:6380
REDIS_URL=redis://localhost:6379
REDIS_KEY_PREFIX=nullbox:

# ─── S3 / Object Storage ──────────────────────────────────────────────
S3_BUCKET=nullbox-files
S3_REGION=us-east-1
S3_ACCESS_KEY_ID=your_access_key
S3_SECRET_ACCESS_KEY=your_secret_key
# Leave empty for AWS S3, set for Cloudflare R2 / MinIO
S3_ENDPOINT=
S3_PRESIGN_TTL=900

# ─── Upload Limits ────────────────────────────────────────────────────
MAX_FILE_SIZE_MB=2048
MAX_DOWNLOAD_COUNT=100
MAX_EXPIRY_DAYS=30
DEFAULT_EXPIRY_DAYS=7
DEFAULT_DOWNLOAD_COUNT=5
AUTH_REQUIRED_ABOVE_MB=0
BLOCKED_EXTENSIONS=exe,bat,cmd,com,scr,pif,vbs,vbe,js,jse,ws,wsf,wsc,wsh,ps1,ps1xml,ps2,ps2xml,psc1,psc2,msh,msh1,msh2,mshxml,msh1xml,msh2xml,jar,msi,dll

# ─── Auth / SSO ───────────────────────────────────────────────────────
NEXTAUTH_SECRET=change_me_in_production_min_32_chars
NEXTAUTH_URL=http://localhost:3000

# Google OAuth
AUTH_GOOGLE_ID=
AUTH_GOOGLE_SECRET=

# GitHub OAuth
AUTH_GITHUB_ID=
AUTH_GITHUB_SECRET=

# Generic OIDC (Keycloak, Okta, Azure AD, etc.)
AUTH_OIDC_ISSUER=
AUTH_OIDC_CLIENT_ID=
AUTH_OIDC_CLIENT_SECRET=
AUTH_OIDC_NAME=SSO

# ─── Honeypot / Canary ────────────────────────────────────────────────
HONEYPOT_ENABLED=true
HONEYPOT_LOG_FILE=./logs/canary.log
HONEYPOT_WEBHOOK_URL=

# ─── Admin ────────────────────────────────────────────────────────────
ADMIN_SECRET=change_me_admin_secret
ABUSE_EMAIL=abuse@yourdomain.com

# ─── Security ─────────────────────────────────────────────────────────
TOKEN_SECRET=change_me_token_secret_min_32_chars
```