Files
canon/.env.example
cdnutterandClaude Opus 5.5 ec0b053eb3 Run as PUID:PGID with a configurable umask
The image now starts through docker-entrypoint.sh: as root it hands
/data and the backup folder to PUID:PGID (only files owned by someone
else, so restarts stay fast), applies UMASK, and runs Canon as that
user with su-exec. Started with --user, it runs Canon directly. The
image defaults to 1000:1000; the Compose file presets Unraid's 99:100.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-08 14:02:43 -07:00

44 lines
1.6 KiB
Bash

# Copy to .env and fill in what you need. Everything here is optional.
# Create the owner account on first start. If unset, Canon prints a one-time
# setup code to the log and you create the account at http://<host>:4242/setup.
CANON_ADMIN_USERNAME=
CANON_ADMIN_PASSWORD=
# API keys. You can also enter these in Settings → Integrations; values set
# here take precedence and are locked in the web UI.
CANON_TMDB_API_KEY=
CANON_TVDB_API_KEY=
CANON_TVDB_PIN=
CANON_IGDB_CLIENT_ID=
CANON_IGDB_CLIENT_SECRET=
# Behind a reverse proxy that terminates HTTPS:
# CANON_TRUST_PROXY=true # honor X-Forwarded-For / -Proto / -Host
# CANON_SECURE_COOKIES=true # always mark the session cookie Secure
# CANON_HOST=0.0.0.0 # all network interfaces; 127.0.0.1 = this machine only
# CANON_PORT=4242
# CANON_LOG_LEVEL=debug
# CANON_BACKUP_DIR=./data/backups # outside Docker; Compose sets /backups
# Time zone for backup schedules (default UTC in Docker).
# TZ=America/Los_Angeles
# ---- Docker Compose only (not read by Canon itself) ----
# Where the database and images live. Default: the canon_canon-data volume.
# Use an absolute host path to keep them in a folder (writable by UID 1000).
# CANON_DATA_PATH=/srv/canon
# Where backups are written. Default: the canon_canon-backups volume.
# CANON_BACKUP_PATH=/mnt/nas/canon-backups
# Owner of the files Canon writes (database, images, backups). The Compose
# file defaults to Unraid's 99:100 (nobody:users).
# PUID=99
# PGID=100
# UMASK=022
# Host address and port to publish on.
# CANON_BIND=0.0.0.0
# CANON_PUBLISH_PORT=4242
# Version label baked into the image at build time.
# CANON_VERSION=dev