26 lines
956 B
Plaintext
26 lines
956 B
Plaintext
# Copy to /etc/skd/env or .env for local runs
|
|
# Optional allowlist of manageable users (otherwise all real users with uid>=1000)
|
|
SKD_ALLOWED_USERS=child1,child2
|
|
SKD_AUTH_SECRET=change-me-secret
|
|
SKD_TOKEN_TTL_SECONDS=900
|
|
# PAM ist immer aktiv; OIDC wird zusaetzlich angeboten, wenn konfiguriert.
|
|
# SKD_AUTH_MODE bleibt optional und wird derzeit nicht erzwungen.
|
|
SKD_AUTH_MODE=pam
|
|
SKD_AUTH_ALLOWED_USERS=
|
|
SKD_AUTH_ALLOWED_GROUPS=sudo
|
|
# Ubuntu/Debian: install.sh creates /etc/pam.d/skd; adjust for other distros.
|
|
SKD_AUTH_PAM_SERVICE=skd
|
|
SKD_OIDC_ISSUER=
|
|
SKD_OIDC_CLIENT_ID=
|
|
SKD_OIDC_CLIENT_SECRET=
|
|
SKD_OIDC_REDIRECT_URI=http://localhost:8000/login/oidc/callback
|
|
SKD_OIDC_SCOPES=openid profile email
|
|
SKD_SESSION_COOKIE_NAME=skd_session
|
|
SKD_SESSION_COOKIE_SECURE=false
|
|
SKD_OIDC_STATE_COOKIE_NAME=skd_oidc_state
|
|
SKD_DEFAULT_COUNTDOWN=60
|
|
SKD_DEFAULT_SOUND=false
|
|
SKD_NOTIFY_TIMEOUT=5
|
|
# Set to true to test without performing real system changes
|
|
SKD_DRY_RUN=false
|