skyfleetConfigure
The few environment variables Skyfleet reads, and how to put it behind HTTPS.
Almost everything is set in Admin. The container reads only these, and none are required:
| Variable | Default | What it does |
|---|---|---|
PUBLIC_URL | Set in Admin | Pins the public URL, like https://skyfleet.acme.com. Admin then shows it read-only. |
DATA_DIR | /data | Where the database and agent files live. Keep it on a volume. |
PORT | 8787 | The port the server listens on inside the container. |
TRUST_PROXY | loopback, linklocal, uniquelocal | Which peers may set X-Forwarded-For, the client address sign-in rate limits use. Add your proxy's address if it reaches the container from a public one, or true to trust every peer. |
The encryption key for saved secrets is made on first start and stored with the data, so back up the volume, not a key file.
HTTPS in front
Skyfleet speaks plain HTTP on port 8787. Put a proxy in front for TLS. The terminal uses WebSockets, so the proxy must pass them through.
skyfleet.acme.com {
reverse_proxy localhost:8787
}Caddy gets a certificate and passes WebSockets by itself.