Skip to content

docs: document all env vars and add size limits guide - #13

Open
chrip wants to merge 2 commits into
mainfrom
docs/env-vars-size-limits
Open

docs: document all env vars and add size limits guide#13
chrip wants to merge 2 commits into
mainfrom
docs/env-vars-size-limits

Conversation

@chrip

@chrip chrip commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

Document every environment variable supported by the standalone entrypoint in the Docker configuration table. Previously only a subset was listed.

Add a 'Size limits' info box with a 200 MB PPTX example showing how the four size-gate variables interact at different stages (nginx upload, temp file buffer, converter download, uncompressed XML size).

Assisted-by: OpenCode:qwen3.6-27b

Document every environment variable supported by the standalone entrypoint
in the Docker configuration table. Previously only a subset was listed.

Add a 'Size limits' info box with a 200 MB PPTX example showing how the
four size-gate variables interact at different stages (nginx upload, temp
file buffer, converter download, uncompressed XML size).

Assisted-by: OpenCode:qwen3.6-27b
Signed-off-by: Christoph Schaefer <christoph.schaefer@nextcloud.com>
@chrip
chrip requested review from DmySyz and rikled August 5, 2026 13:06
Ports the corrections from the review of the same content in
nextcloud/documentation#15414, where these two defects were caught.

The "Size limits" box described opening a stored document as a browser
upload and walked through all four variables in one sequence. The Document
Server downloads such a file itself, so the two request-body limits never
apply. Split into the two paths that actually exist:

- documents the server downloads (FILECONVERTER_MAX_DOWNLOAD_BYTES,
  FILECONVERTER_INPUT_LIMIT_UNCOMPRESSED)
- files posted to the server (NGINX_CLIENT_MAX_BODY_SIZE, MAX_FILE_SIZE)
  for image inserts, save-back, and conversion or command requests

USE_UNAUTHORIZED_STORAGE was documented as allowing HTTP storage. It sets
rejectUnauthorized: false on every outbound HTTPS connection, disabling
certificate, host name, and expiry validation, and has no effect on plain
HTTP. Now carries a warning naming the MITM exposure.

Adds the operator-facing variables the table skipped: SSL_CERTIFICATE_PATH,
SSL_KEY_PATH, SSL_DHPARAM_PATH, SECURE_LINK_SECRET, REDIS_SERVER_USER/DB,
AMQP_VHOST/URI, NGINX_WORKER_CONNECTIONS, ADMINPANEL_ENABLED,
EXAMPLE_ENABLED, DS_LOG_LEVEL. SSL_VERIFY_CLIENT and both HSTS variables
are noted as inert unless SSL_CERTIFICATE_PATH and SSL_KEY_PATH are set and
both files exist.

Also documents the /var/www/euro-office/Data volume on the Docker
installation page, whose loss regenerates the JWT secret and breaks the
connector, and groups the environment tables by concern since one flat
table had become unreadable.

Signed-off-by: Christoph Schaefer <christoph.schaefer@nextcloud.com>
Assisted-by: Claude Opus 5 (1M context)
Signed-off-by: Christoph Schaefer <christoph.schaefer@nextcloud.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant