The variables that say where the server is published, which proxies it
believes, who may reach it from outside and how many requests it accepts.
Most of them are set once in the compose file; what Admin → Remote Access
stores afterwards wins over them, as explained in the
Configuration reference.
The public address. An https:// address turns on Secure cookies, HSTS and trust in X-Forwarded-Proto. E-mail links, single sign-on redirects and cast URLs are built from it.
Remote Access → External URL wins when set, live; an https:// External URL also turns HTTPS on
EVEY_SERVER_PORT
9090
The internal gRPC port. The HTTP API and the web interface listen on this port plus one (9091).
none
EVEY_GRPC_BIND
127.0.0.1
The address the gRPC port listens on. The remote-access gate does not cover gRPC, so widening it (0.0.0.0) logs a warning and makes firewalling it your job.
none
EVEY_SERVER_NAME
Evey
The name shown on the sign-in page, in the apps' server list and in e-mails.
Networks whose forwarded client address is believed, comma-separated (for a proxy in a container: 172.16.0.0/12, narrowed once known). Added to loopback, never replacing it; a malformed entry stops the start.
Remote Access → Trusted proxies replaces this list, live; emptying the field brings the variable back
EVEY_REAL_IP_HEADER
X-Forwarded-For
The header a trusted proxy puts the client address in.
none
EVEY_FORWARDED_PROTO
derived
Deprecated: HTTPS is derived from the scheme of EVEY_SERVER_BASE_URL. Still accepted as an override, with a warning.
These seed the first start; Admin → Remote Access then stores its own
values and applies them without a restart. How the gate decides:
Remote access and HTTPS.
Variable
Default
What it does
Panel
EVEY_REMOTE_ACCESS_ENABLED
unset
Unset: inferred at startup, on when EVEY_SERVER_BASE_URL or EVEY_REMOTE_ACCESS_EXTERNAL_URL is public. true or false: your explicit choice, never overridden.
Remote Access → Enable Remote Access, live
EVEY_REMOTE_ACCESS_EXTERNAL_URL
empty
The public address, when it differs from EVEY_SERVER_BASE_URL. An https:// address turns HTTPS mode on, like the base URL.
Remote Access → External URL, live
EVEY_REMOTE_ACCESS_LAN_NETWORKS
10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
Networks treated as home. Add a VPN or CGNAT range (100.64.0.0/10) whose clients should count as local.
Remote Access → LAN Networks, live
EVEY_REMOTE_ACCESS_MAX_BITRATE_KBPS
0
A bitrate ceiling for clients outside the home, in kbit/s; 0 = none. A private address is never capped.