mirror of
https://hubproxy.babadafafafafa.cn/https://github.com/mihomo-party-org/clash-party.git
synced 2026-09-20 08:03:39 +08:00
25 lines
1010 B
Plaintext
25 lines
1010 B
Plaintext
# Public domain. An A/AAAA DNS record MUST point at this VPS before deploying —
|
|
# Caddy uses it to obtain a Let's Encrypt certificate. Required.
|
|
DOMAIN=gw.example.com
|
|
|
|
# Default per-user device limit for `cpx-admin add-user` (override per user with --limit).
|
|
DEVICE_LIMIT_DEFAULT=3
|
|
|
|
# ---- Advanced (sensible defaults; uncomment only to override) ----
|
|
# gateway origin written into /.well-known/cpx-gateway (defaults to https://$DOMAIN)
|
|
# PUBLIC_ORIGIN=https://gw.example.com
|
|
# Allowed client/server clock skew for signed requests (ms)
|
|
# CLOCK_SKEW_MS=300000
|
|
# Upstream subscription fetch timeout (ms) and max size (bytes)
|
|
# SUB_TIMEOUT_MS=30000
|
|
# SUB_MAX_BYTES=10485760
|
|
# Pending nonces kept per device
|
|
# NONCE_POOL_MAX=8
|
|
# Login attempts allowed per IP per window
|
|
# LOGIN_MAX=10
|
|
# LOGIN_WINDOW_MS=60000
|
|
# Set to "true" to retire this gateway: /challenge and /config return 410 gateway_retired
|
|
# RETIRED=false
|
|
# Path (inside the container) to a private CA cert for the subscription origin
|
|
# ORIGIN_CA_FILE=
|