.env.example

# Recommendation: Directly paste the full status page URL(s). Multiple URLs can be separated by "|".
# 推荐：直接粘贴完整状态页 URL，支持多个 URL，用 "|" 分隔
UPTIME_KUMA_URLS=https://example.kuma-mieru.invalid/status/default|https://example.kuma-mieru.invalid/status/secondary

# Legacy compatibility (optional): If UPTIME_KUMA_URLS is not set, the following variables will be used.
# 兼容旧版（可选）：如果未设置 UPTIME_KUMA_URLS，则使用以下变量
# UPTIME_KUMA_BASE_URL=https://example.kuma-mieru.invalid
# PAGE_ID=default,secondary

KUMA_MIERU_EDIT_THIS_PAGE=false
KUMA_MIERU_SHOW_STAR_BUTTON=true

KUMA_MIERU_TITLE="Kuma Mieru"
KUMA_MIERU_DESCRIPTION="A beautiful and modern uptime monitoring dashboard"
KUMA_MIERU_ICON="/icon.svg"

# Legacy variable name compatibility (optional): If KUMA_MIERU_* is not set, it will fall back to FEATURE_*.
# 兼容旧版变量名（可选）：KUMA_MIERU_* 未设置时会自动回退到 FEATURE_*
# FEATURE_EDIT_THIS_PAGE=false
# FEATURE_SHOW_STAR_BUTTON=true
# FEATURE_TITLE="Kuma Mieru"
# FEATURE_DESCRIPTION="A beautiful and modern uptime monitoring dashboard"
# FEATURE_ICON="/icon.svg"

# Allow insecure TLS (skip certificate validation) for upstream Uptime Kuma requests.
# 允许对上游 Uptime Kuma 请求使用不安全的 TLS（跳过证书验证）。
# Default is false (recommended). Set to true only for trusted self-signed environments.
# 默认值为 false（推荐）。仅在受信任的自签名环境中设置为 true。
# ALLOW_INSECURE_TLS=false

# Global upstream request policy (optional)
# 全局上游请求策略（可选）
# REQUEST_TIMEOUT_MS=8000
# REQUEST_RETRY_MAX=3
# REQUEST_RETRY_DELAY_MS=500

# Enable strict SSR failure mode. When true, if all pages fail in multi-page mode,
# root layout throws and renders global error page.
# 启用严格 SSR 失败模式。开启后，多页面全部失败时会触发全局错误页。
# SSR_STRICT_MODE=true

# Error page dev details mode (client-visible variable).
# When enabled, error pages render full stack traces.
# 错误页调试详情模式（客户端可见变量）。开启后会在错误页以显示完整堆栈。
# NEXT_PUBLIC_ERROR_PAGE_DEV_MODE=false

# Allow the dashboard to be embedded in an iframe
# 允许仪表板在 iframe 中嵌入
#
# Options:
# 选项：
# - false or unset: Block iframe embedding (default, most secure)
# - false 或未设置：阻止 iframe 嵌入（默认，最安全）
# - true: Allow embedding from any origin (NOT recommended, security risk)
# - true：允许从任何源嵌入（不推荐，存在安全风险）
# - Comma-separated origin list: Allow only specified origins (self always included)
# - 逗号分隔的源列表：仅允许指定的源（自身始终包含）
#
# Examples:
# 示例：
#   ALLOW_EMBEDDING=false                           # Block embedding (default) - 阻止嵌入（默认）
#   ALLOW_EMBEDDING=true                            # Allow all (not recommended) - 允许所有（不推荐）
#   ALLOW_EMBEDDING=example.com                     # Allow self + example.com - 允许自身 + example.com
#   ALLOW_EMBEDDING=example.com,app.example.com     # Allow self + multiple origins - 允许自身 + 多个源
#   ALLOW_EMBEDDING=https://example.com             # With protocol (also works) - 带协议（同样有效）
#
# Security Note: Using 'true' allows any website to embed your dashboard,
# which may lead to clickjacking attacks. Always specify allowed origins
# when possible. The same origin ('self') is always included when you
# specify an origin list.
# 安全提示：使用 'true' 将允许任何网站嵌入您的仪表板，这可能导致点击劫持攻击。
# 尽可能指定允许的源。当您指定源列表时，同源（'self'）始终包含在内。
#
# ALLOW_EMBEDDING=example.com,app.example.com