Configuration

Everything is configured at container startup via environment variables — there is no admin UI to drift from your compose file. This page lists every variable in the community edition.

Core

VariableDefaultPurpose
SITEBIN_BASE_DOMAIN— (required)Main domain. View subdomains, edit UI, API and WebDAV live under it. May include a port for URL generation (host:8085).
SITEBIN_VIEW_ACCESSsubdomainHow site content is served: subdomain (<id>.base, needs a wildcard cert), path (base/v/<id>/, no wildcard needed), or both.
SITEBIN_DATA_DIR/dataData root.

TLS & domains

VariableDefaultPurpose
SITEBIN_DNS_PROVIDERDNS module for the wildcard cert: cloudflare, hetzner, duckdns. Only needed for subdomain/both.
SITEBIN_DNS_TOKENAPI token for the DNS provider (read via env by Caddy, never written to disk).
SITEBIN_TLS_SNIPPETAdvanced: raw lines injected into the wildcard site's tls { … } block (for multi-credential providers like netcup/porkbun).
SITEBIN_ACME_EMAILACME account email.
SITEBIN_HTTP_ONLYfalseServe plain HTTP only (local testing / external TLS).

Limits & rates

VariableDefaultPurpose
SITEBIN_MAX_SITE_BYTES104857600Per-site storage cap (100 MiB).
SITEBIN_MAX_FILES1000Per-site file-count cap.
SITEBIN_MAX_EXPIRY_DAYS0 (off)Optional cap on how far in the future expiry may be set.
SITEBIN_RATE_CREATE_PER_HOUR / SITEBIN_RATE_CREATE_BURST30 / 10Anonymous creation limit per IP.
SITEBIN_RATE_AUTH_PER_5MIN10Password-attempt limit per (IP, site) — edit, view, and WebDAV auth.

WebDAV & FTP

VariableDefaultPurpose
SITEBIN_WEBDAV_ENABLEDtrueGlobal WebDAV switch (per-site toggle still applies).
SITEBIN_FTP_ENABLEDfalseGlobal FTP switch (per-site toggle also required).
SITEBIN_FTP_ADDR / SITEBIN_FTP_PASV_PORT_MIN / _MAX:21 / 21000 / 21010FTP control port + passive data-port range (map them in docker run).
SITEBIN_FTP_PUBLIC_HOSTbase domainHost advertised for FTP passive mode.
SITEBIN_FTP_TLS_CERT / SITEBIN_FTP_TLS_KEYOptional PEM cert/key for FTPS (encrypts credentials).

Misc

VariableDefaultPurpose
SITEBIN_EMBED_ORIGINSOrigins allowed to embed the create flow cross-origin (comma-separated, or *). Enterprise feature — the community edition ignores it with a warning. See Embed component.
SITEBIN_TRACK_VIEWStrueCount per-site page views (Accept: text/html) + last-seen.
SITEBIN_READONLYfalseFreeze new site creation.
SITEBIN_CLEANUP_INTERVAL10mExpiry sweep interval.