Dashboard configuration

The dashboard reads these environment variables at start. The engine’s settings are in Configuration.

Variable	Default	What it does
LUMBUNG_DASHBOARD_URL	http://localhost:4871	The address people open, without /app. Sign-in cookies, passkeys and the origin check bind to it, so set it to the public address behind a proxy.
LUMBUNG_ENGINE_URL	http://127.0.0.1:4870	Where the dashboard reaches the engine’s REST API. Under Docker Compose, http://engine:4870.
LUMBUNG_PUBLIC_ENGINE_URL	none	The engine address shown in connect snippets. When unset, the dashboard’s own address, which fits a proxy that serves both under one name.
LUMBUNG_SERVICE_TOKEN	none	The engine’s service token. When unset, it’s read from LUMBUNG_SERVICE_TOKEN_FILE.
LUMBUNG_SERVICE_TOKEN_FILE	../engine/data/secrets/service-token	A file holding the service token, like the secrets/service-token the engine writes in its data folder. Read on first use.
LUMBUNG_DASHBOARD_DATA_DIR	./data	Folder for dashboard.db (users, sessions, passkeys and invites) and the generated session secret.
LUMBUNG_AUTH_SECRET	none	Signs sessions, at least 32 characters. When unset, one is generated on first start and kept in secrets/auth-secret in the data folder, mode 600.
LUMBUNG_CLIENT_IP_HEADER	none	The header that carries the client address behind a proxy, like X-Forwarded-For or CF-Connecting-IP. When unset, the connection’s address is used. Same as the engine’s setting.
LUMBUNG_TRUSTED_PROXIES	127.0.0.1/32,::1/128	Comma-separated IPs or CIDR networks allowed to set the client address header. An X-Forwarded-For list is read from the right, skipping these. Same as the engine’s setting.