Appearance
Settings (.env)
The settings are in /opt/flowtrix/.env (mode 0600); the comments there explain each one. After a change:
sh
cd /opt/flowtrix && sudo docker compose up -dSystem › Settings shows what is in use. The installer writes the images, the licence folder, the updater's folder and the version; leave those to it.
Keep FLOWTRIX_SECRET
It seals the token issuers' secrets. Changed or lost, every issuer's secret becomes unreadable and must be rotated, and the installer refuses to make a new one while data sealed with the old one exists. Keep a copy of .env.
Server
| Setting | Meaning |
|---|---|
FLOWTRIX_SECRET | The server's own secret (32+ characters): seals the issuers' secrets, signs the interface's preview links; at the first start also the issuer "Default" |
FLOWTRIX_ADMIN_USER, FLOWTRIX_ADMIN_PASSWORD | The first admin, made at the first start only |
FLOWTRIX_VERSION | The version installed; written by the installer |
Ports
| Setting | Default | Meaning |
|---|---|---|
FLOWTRIX_HTTP_PORT | 8080 | Video over HTTP |
FLOWTRIX_API_PORT | 8090 | The interface and /v1 |
FLOWTRIX_HTTPS_PORT | 8443 | Video over HTTPS, with a certificate |
FLOWTRIX_API_HTTPS_PORT | 9443 | The interface over HTTPS, with a certificate |
FLOWTRIX_HTTP_BIND, FLOWTRIX_API_BIND, FLOWTRIX_HTTPS_BIND | empty | Where each listens: empty for every address, 127.0.0.1 for this machine only |
FLOWTRIX_PLAY_URL | empty | Where viewers reach the edge, for the interface's player (e.g. https://tv.example.com) |
HTTPS and proxy
| Setting | Meaning |
|---|---|
FLOWTRIX_TLS | A folder with fullchain.pem and privkey.pem; empty for HTTP only. See HTTPS |
FLOWTRIX_PROXY | The reverse proxy's addresses or ranges (e.g. 172.16.0.0/12); empty: X-Forwarded-For is never believed |
Storage
| Setting | Holds | Default |
|---|---|---|
FLOWTRIX_RECORDINGS | Catch-up recordings | A Docker volume |
FLOWTRIX_STORAGE | The storage root: VOD libraries are folders under it | A Docker volume |
FLOWTRIX_FETCH_PRIVATE | true lets films be fetched from your private network | Refused |
A folder on the host must exist and belong to uid 10001: sudo chown -R 10001:10001 <folder>.
Qualities and updates
| Setting | Meaning |
|---|---|
FLOWTRIX_GPU, FLOWTRIX_GPU_GROUP | The host's render device and the group that may use it; written by the installer |
FLOWTRIX_HWACCEL | none keeps qualities on the CPU |
FLOWTRIX_AUTO_SECURITY_UPDATES | false: security releases wait for an admin's click |