bigul91/avatar-server repository overview

services:
  avatar-server:
    image: bigul91/avatar-server:latest
    container_name: avatar-server
    restart: unless-stopped
    ports:
      - 3010:8000
    volumes:
      - avatar-data:/app/data
    environment:
      # --- Allgemein ---
      - APP_NAME=Avatar Server           # Im UI angezeigt
      - DEBUG=false                      # Detaillierte Fehlermeldungen
      - BASE_URL=                        # z.B. https://avatar.domain.com

      # --- Avatar ---
      - AVATAR_STORAGE_PATH=./data/avatars # Verzeichnis fuer Dateien
      - AVATAR_DEFAULT_SIZE=80           # Standard-Groesse (px)
      - AVATAR_MAX_SIZE=512              # Max. Groesse (px)
      - AVATAR_SIZES=[32, 64, 80, 128, 256, 512] # Verfuegbare Groessen
      - AVATAR_UPLOAD_MAX_BYTES=10485760 # Max. Upload (10 MB)
      - AVATAR_ORIGINAL_MAX_PX=1920     # Max. Seitenlaenge Original
      - AVATAR_CACHE_MAX_AGE=3600       # Cache in Sekunden (1h)
      - AVATAR_MAX_UPLOADS=6            # Max. Avatare pro User

      # --- Sprache / Datenbank ---
      - DEFAULT_LANGUAGE=de             # de oder en
      - DATABASE_PATH=./data/avatar_server.db # SQLite-Pfad

      # --- Admin-User (erster Start) ---
      - [email protected]   # E-Mail des Admins
      - ADMIN_PASSWORD=changeme         # Passwort des Admins

      # --- Login ---
      - LEGACY_LOGIN=true               # E-Mail + Passwort Login
      - JWT_SECRET=change-me-to-a-random-secret # Unbedingt aendern!
      - JWT_EXPIRE_MINUTES=1440         # Gueltigkeit (24h)

      # --- Security ---
      - TRUSTED_PROXY=                  # z.B. 192.168.1.0/24
      - ALLOWED_HOSTS=localhost         # z.B. localhost,avatars.domain.de

      # --- Avatar Access Control ---
      - AVATAR_ACCESS=public            # public oder subnet
      - AVATAR_ALLOWED_SUBNETS=         # z.B. 192.168.1.0/24,10.0.0.0/8
      - AVATAR_USER_CAN_PUBLISH=false   # User kann Avatar freigeben

      # --- OIDC / SSO ---
      - OIDC_ENABLED=false              # OIDC aktivieren
      - OIDC_DISCOVERY_URL=             # z.B. https://sso.domain.com/realms/myrealm
      - OIDC_CLIENT_ID=                 # Client-ID vom IdP
      - OIDC_CLIENT_SECRET=             # Client-Secret vom IdP
      - OIDC_CLAIM_EMAIL=email          # Claim fuer E-Mail
      - OIDC_CLAIM_NAME=nickname        # Claim fuer Anzeigename
      - OIDC_CLAIM_PICTURE=picture      # Claim fuer Avatar-URL (WebP)
      - OIDC_CLAIM_PICTURE_PNG=avatar_png # Claim fuer Avatar-URL (PNG)
      - OIDC_CLAIM_GROUPS=groups        # Claim fuer Gruppen
      - OIDC_ADMIN_GROUP=admin          # Gruppe fuer Admin-Rechte
      - OIDC_SYNC_PICTURE=false         # URL an IdP zurueckschreiben
      - OIDC_PICTURE_SIZE=256           # Groesse fuer Picture-Sync (px)

      # --- Dev-Modus ---
      - DEV_MODE=false                  # Fake-User ohne Passwort
      - [email protected]  # Fake-User E-Mail
      - DEV_USER_NAME=Dev User          # Fake-User Name

volumes:
  avatar-data: