Configuration

Every app keeps its settings in config.env in its own folder: KEY=value lines, # for comments. The installers write it; config.env.example in each repository lists every setting. Variables already in the environment (a container's, a service's) win over the file. config.env holds passwords: keep it readable by the owner only.

The names every app reads the same way

# the app's own database
DB_HOST=db.example.lan
DB_PORT=3306
DB_NAME=calendar
DB_USER=calendar
DB_PASSWORD=…

# the Shared ioSuite database (same server as DB_HOST / DB_PORT unless set)
IOSUITE_DB_HOST=…
IOSUITE_DB_PORT=3306
IOSUITE_DB_NAME=iosuite
IOSUITE_DB_USER=iosuite
IOSUITE_DB_PASSWORD=…

PUBLIC_URL=https://calendar.example.com   # the address people and the other apps reach it at
COOKIE_DOMAIN=example.com                 # one sign-in for every app under this domain
HOST=0.0.0.0                              # where the server listens
PORT=8620                                 # each app has its own default
INTERNAL_URL=http://192.168.1.151:8620    # where the app is inside the network (default: the host's LAN address)
FORWARDED_ALLOW_IPS=*                     # who may pass X-Forwarded-For / -Proto: your reverse proxy
TLS_CERT_FILE=… TLS_KEY_FILE=…            # serve HTTPS directly instead of behind a proxy
ADMIN_USER=…  ADMIN_PASSWORD=…            # the first admin, on an empty Shared ioSuite database
TZ=Europe/Brussels
LOG_FILE=…                                # the server log (default data/<app>.log; empty: none)
UPDATE_CHECK=0                            # lock the daily version check off
MCP=1                                     # the MCP server on (apps that have one)

On/off switches take 1/0, true/false, yes/no or on/off. Each app adds its own settings (the photo folder and digiKam for ioPix, the LDAP port for ioContacts...); see its README.

Settings that hold for the whole suite are not in config.env but in the Shared ioSuite database, changed in any app: sign-in at the proxy (Settings › Security), each app's default role and sign-in requirement (Settings › Global settings › Apps), and the keys for services outside the suite (Settings › Global settings › Keys and tokens).

Default ports

App	Port
ioPix	8600
ioNotes	8610
ioCalendar	8620
ioSuite	8630
ioContacts	8640 (LDAP 3890)
ioHealth	8650