Deploy
Environment variables
The server reads a handful of settings from its environment. Under deploy/lxc.sh they go in /etc/default/cermm; restart after changing them.
| Variable | Default | What it does |
|---|---|---|
CERMM_PORT | 4800 | The one port, for HTTPS and plain HTTP. deploy/lxc.sh writes it into the service file, so set it when you run the script. |
CERMM_HOST | 0.0.0.0 | The address to listen on. |
CERMM_DATA | data/ in the checkout; /var/lib/cermm under deploy/lxc.sh | Where the database, keys and certificates live. See Data and backing it up. |
CERMM_URL | this machine's LAN address | The address agents use to reach the server, and written into install lines, like https://cermm.lan:4800. Its host name is added to CERMM's own certificate. |
CERMM_TLS | on | off serves plain HTTP only (testing, or behind a proxy that does HTTPS). on keeps HTTPS even with CERMM_TRUST_PROXY=1. See HTTPS. |
CERMM_TRUST_PROXY | unset | 1 believes X-Forwarded-* headers from every address and turns CERMM's own HTTPS off. Prefer the Reverse proxy setting, which trusts only the proxy's addresses. See Behind a reverse proxy. |
CERMM_WIKI_PORT | 8471 | Where CERMM serves this wiki (plain HTTP, from the checkout's wiki/). off turns it off. |
CERMM_SITE_PORT | 8470 | Where CERMM serves the website, cermm.it (plain HTTP, from the checkout's site/). off turns it off. |
CERMM_AGENTS | agent/dist/ in the checkout | Where the server finds the agent builds it hands out. |
An example
# /etc/default/cermm
CERMM_URL=https://cermm.lan:4800Then systemctl restart cermm.