Everything can be set in the environment: /opt/gangway/.env for an installer install, the
template on Unraid. Settings not pinned there are editable in Admin.
compose.yaml documents
them inline too. Your own changes to the compose setup go in compose.override.yaml beside it,
which upgrades leave alone.
The sign-in button’s text; Sign in with SSO by default
GANGWAY_PASSWORD_LOGIN
on
false leaves only single sign-on, once the provider is set up
GANGWAY_UPDATE_CHECK
on
false stops the daily check for a new release
GANGWAY_WATERMARK_REPORT_URL
(Admin)
An https:// page the watermark’s Report link opens (below)
GANGWAY_REPORT_DOMAINS
(Admin)
Comma-separated domains whose previews always show the Report link
GANGWAY_GITHUB_APP_ID etc.
(Admin)
The GitHub App, if not created from Admin → GitHub
With an https:// URL, gangway sends no mail itself. It posts each message as JSON to that URL, and
your service sends it, with its own templates if you like. The URL’s password (or its user name, if
there is no password) goes as Authorization: Bearer <token>, and never in the request URL:
{
"from": "gangway <noreply@example.com>",
"to": "ana@example.com",
"subject": "Reset your gangway password",
"text": "…",
"purpose": "reset",
"link": "https://app.example.com/set-password#…"
}
purpose is invite, reset or test; link is the one-use link in text, or null for a test.
Any 2xx answer counts as sent.
The watermark can carry a Report link, so anyone viewing a preview can report it. Set the page it
opens in Admin → Settings → Watermark, or with GANGWAY_WATERMARK_REPORT_URL. gangway adds the
preview’s address as ?url= (or &url= when the page already has a query), with the origin and path
only: a query string or fragment can hold a secret, so neither is sent.
Previews under the domains in GANGWAY_REPORT_DOMAINS always keep the link. With the watermark on, it
sits beside the mark; with the watermark off, a small chip shows the Report link alone, with no gangway
branding. A domain matches itself and every name under it: example.com covers shop.example.com, but
not myexample.com. Set by environment variable, both settings are locked in Admin.