[{"data":1,"prerenderedAt":879},["ShallowReactive",2],{"navigation_docs_en":3,"-en-self-hosting-configuration":427,"-en-self-hosting-configuration-surround":874},[4,31,117,188,238,271,310,369,378],{"title":5,"icon":6,"path":7,"stem":8,"children":9,"page":30},"Getting started","i-hugeicons-rocket-01","\u002Fen\u002Fgetting-started","en\u002F01.getting-started",[10,15,20,25],{"title":11,"path":12,"stem":13,"icon":14},"What is DDM?","\u002Fen\u002Fgetting-started\u002Fwhat-is-ddm","en\u002F01.getting-started\u002F01.what-is-ddm","i-hugeicons-information-circle",{"title":16,"path":17,"stem":18,"icon":19},"Account and sign-in","\u002Fen\u002Fgetting-started\u002Fsign-in","en\u002F01.getting-started\u002F02.sign-in","i-hugeicons-key-01",{"title":21,"path":22,"stem":23,"icon":24},"AI in DDM","\u002Fen\u002Fgetting-started\u002Fai-in-ddm","en\u002F01.getting-started\u002F03.ai-in-ddm","i-hugeicons-ai-magic",{"title":26,"path":27,"stem":28,"icon":29},"System status","\u002Fen\u002Fgetting-started\u002Fsystem-status","en\u002F01.getting-started\u002F04.system-status","i-hugeicons-activity-03",false,{"title":32,"icon":33,"path":34,"stem":35,"children":36,"page":30},"CMS","i-hugeicons-dashboard-square-01","\u002Fen\u002Fcms","en\u002F02.cms",[37,42,47,52,57,62,67,72,77,82,87,92,97,102,107,112],{"title":38,"path":39,"stem":40,"icon":41},"The CMS at a glance","\u002Fen\u002Fcms\u002Foverview","en\u002F02.cms\u002F01.overview","i-hugeicons-compass-01",{"title":43,"path":44,"stem":45,"icon":46},"Uploading documents","\u002Fen\u002Fcms\u002Fupload","en\u002F02.cms\u002F02.upload","i-hugeicons-upload-01",{"title":48,"path":49,"stem":50,"icon":51},"Categories","\u002Fen\u002Fcms\u002Fcategories","en\u002F02.cms\u002F03.categories","i-hugeicons-folder-tree",{"title":53,"path":54,"stem":55,"icon":56},"Editing documents","\u002Fen\u002Fcms\u002Fdocuments","en\u002F02.cms\u002F04.documents","i-hugeicons-file-edit",{"title":58,"path":59,"stem":60,"icon":61},"Searching and filtering","\u002Fen\u002Fcms\u002Fsearch-and-filters","en\u002F02.cms\u002F05.search-and-filters","i-hugeicons-search-01",{"title":63,"path":64,"stem":65,"icon":66},"Groups and permissions","\u002Fen\u002Fcms\u002Fgroups-and-permissions","en\u002F02.cms\u002F06.groups-and-permissions","i-hugeicons-user-multiple",{"title":68,"path":69,"stem":70,"icon":71},"Users","\u002Fen\u002Fcms\u002Fusers","en\u002F02.cms\u002F07.users","i-hugeicons-user-add-01",{"title":73,"path":74,"stem":75,"icon":76},"Approvals","\u002Fen\u002Fcms\u002Fapprovals","en\u002F02.cms\u002F08.approvals","i-hugeicons-checkmark-badge-01",{"title":78,"path":79,"stem":80,"icon":81},"Markets and translations","\u002Fen\u002Fcms\u002Fmarkets-and-translations","en\u002F02.cms\u002F09.markets-and-translations","i-hugeicons-globe-02",{"title":83,"path":84,"stem":85,"icon":86},"Note templates","\u002Fen\u002Fcms\u002Fnote-templates","en\u002F02.cms\u002F10.note-templates","i-hugeicons-layout-01",{"title":88,"path":89,"stem":90,"icon":91},"Usage and audit log","\u002Fen\u002Fcms\u002Fusage-and-audit","en\u002F02.cms\u002F11.usage-and-audit","i-hugeicons-chart-column",{"title":93,"path":94,"stem":95,"icon":96},"AI assistant","\u002Fen\u002Fcms\u002Fassistant","en\u002F02.cms\u002F12.assistant","i-hugeicons-sparkles",{"title":98,"path":99,"stem":100,"icon":101},"Settings","\u002Fen\u002Fcms\u002Fsettings","en\u002F02.cms\u002F13.settings","i-hugeicons-settings-02",{"title":103,"path":104,"stem":105,"icon":106},"Plans","\u002Fen\u002Fcms\u002Fplans","en\u002F02.cms\u002F14.plans","i-hugeicons-package",{"title":108,"path":109,"stem":110,"icon":111},"Feature requests","\u002Fen\u002Fcms\u002Ffeature-requests","en\u002F02.cms\u002F15.feature-requests","i-hugeicons-idea-01",{"title":113,"path":114,"stem":115,"icon":116},"Report a bug","\u002Fen\u002Fcms\u002Fbug-reports","en\u002F02.cms\u002F16.bug-reports","i-hugeicons-bug-01",{"title":118,"icon":119,"path":120,"stem":121,"children":122,"page":30},"App","i-hugeicons-smart-phone-01","\u002Fen\u002Fapp","en\u002F03.app",[123,128,133,138,143,147,152,157,162,167,170,173,176,179,184],{"title":124,"path":125,"stem":126,"icon":127},"Signing in and finding your way","\u002Fen\u002Fapp\u002Foverview","en\u002F03.app\u002F01.overview","i-hugeicons-login-03",{"title":129,"path":130,"stem":131,"icon":132},"Tabs and split view","\u002Fen\u002Fapp\u002Ftabs","en\u002F03.app\u002F02.tabs","i-hugeicons-layout-2-column",{"title":134,"path":135,"stem":136,"icon":137},"Finding and reading documents","\u002Fen\u002Fapp\u002Fdocuments","en\u002F03.app\u002F03.documents","i-hugeicons-file-01",{"title":139,"path":140,"stem":141,"icon":142},"Favorites","\u002Fen\u002Fapp\u002Ffavorites","en\u002F03.app\u002F04.favorites","i-hugeicons-favourite",{"title":144,"path":145,"stem":146,"icon":61},"Searching","\u002Fen\u002Fapp\u002Fsearch","en\u002F03.app\u002F05.search",{"title":148,"path":149,"stem":150,"icon":151},"Notes","\u002Fen\u002Fapp\u002Fnotes","en\u002F03.app\u002F06.notes","i-hugeicons-note-edit",{"title":153,"path":154,"stem":155,"icon":156},"Calendar and appointments","\u002Fen\u002Fapp\u002Fcalendar","en\u002F03.app\u002F07.calendar","i-hugeicons-calendar-03",{"title":158,"path":159,"stem":160,"icon":161},"Sending to customers","\u002Fen\u002Fapp\u002Foutbox","en\u002F03.app\u002F08.outbox","i-hugeicons-sent",{"title":163,"path":164,"stem":165,"icon":166},"Working offline","\u002Fen\u002Fapp\u002Foffline","en\u002F03.app\u002F09.offline","i-hugeicons-wifi-off-01",{"title":93,"path":168,"stem":169,"icon":96},"\u002Fen\u002Fapp\u002Fassistant","en\u002F03.app\u002F10.assistant",{"title":98,"path":171,"stem":172,"icon":101},"\u002Fen\u002Fapp\u002Fsettings","en\u002F03.app\u002F11.settings",{"title":108,"path":174,"stem":175,"icon":111},"\u002Fen\u002Fapp\u002Ffeature-requests","en\u002F03.app\u002F12.feature-requests",{"title":113,"path":177,"stem":178,"icon":116},"\u002Fen\u002Fapp\u002Fbug-reports","en\u002F03.app\u002F13.bug-reports",{"title":180,"path":181,"stem":182,"icon":183},"Desktop app","\u002Fen\u002Fapp\u002Fdesktop-app","en\u002F03.app\u002F14.desktop-app","i-hugeicons-computer",{"title":185,"path":186,"stem":187,"icon":119},"Mobile app","\u002Fen\u002Fapp\u002Fmobile-app","en\u002F03.app\u002F15.mobile-app",{"title":189,"icon":190,"path":191,"stem":192,"children":193,"page":30},"Sign-in & directories","i-hugeicons-security-check","\u002Fen\u002Fsign-in-and-directories","en\u002F04.sign-in-and-directories",[194,198,202,207,212,217,222,226,230,234],{"title":195,"path":196,"stem":197,"icon":19},"Sign-in methods","\u002Fen\u002Fsign-in-and-directories\u002Fsign-in-methods","en\u002F04.sign-in-and-directories\u002F01.sign-in-methods",{"title":199,"path":200,"stem":201,"icon":190},"Single sign-on","\u002Fen\u002Fsign-in-and-directories\u002Fsingle-sign-on","en\u002F04.sign-in-and-directories\u002F02.single-sign-on",{"title":203,"path":204,"stem":205,"icon":206},"Directory services (LDAP)","\u002Fen\u002Fsign-in-and-directories\u002Fdirectory-services","en\u002F04.sign-in-and-directories\u002F03.directory-services","i-hugeicons-hierarchy",{"title":208,"path":209,"stem":210,"icon":211},"Synchronisation and sign-in","\u002Fen\u002Fsign-in-and-directories\u002Fdirectory-sync","en\u002F04.sign-in-and-directories\u002F04.directory-sync","i-hugeicons-refresh",{"title":213,"path":214,"stem":215,"icon":216},"Microsoft Entra ID","\u002Fen\u002Fsign-in-and-directories\u002Fmicrosoft-entra-id","en\u002F04.sign-in-and-directories\u002F05.microsoft-entra-id","i-hugeicons-building-03",{"title":218,"path":219,"stem":220,"icon":221},"Okta","\u002Fen\u002Fsign-in-and-directories\u002Fokta","en\u002F04.sign-in-and-directories\u002F06.okta","i-hugeicons-finger-print",{"title":223,"path":224,"stem":225,"icon":81},"Google Workspace","\u002Fen\u002Fsign-in-and-directories\u002Fgoogle-workspace","en\u002F04.sign-in-and-directories\u002F07.google-workspace",{"title":227,"path":228,"stem":229,"icon":119},"Two-factor authentication","\u002Fen\u002Fsign-in-and-directories\u002Ftwo-factor-authentication","en\u002F04.sign-in-and-directories\u002F08.two-factor-authentication",{"title":231,"path":232,"stem":233,"icon":221},"Passkeys","\u002Fen\u002Fsign-in-and-directories\u002Fpasskeys","en\u002F04.sign-in-and-directories\u002F09.passkeys",{"title":235,"path":236,"stem":237,"icon":156},"Calendar access","\u002Fen\u002Fsign-in-and-directories\u002Fcalendar-access","en\u002F04.sign-in-and-directories\u002F10.calendar-access",{"title":239,"icon":240,"path":241,"stem":242,"children":243,"page":30},"MCP server","i-hugeicons-ai-network","\u002Fen\u002Fmcp-server","en\u002F05.mcp-server",[244,248,253,257,262,266],{"title":245,"path":246,"stem":247,"icon":240},"Overview","\u002Fen\u002Fmcp-server\u002Foverview","en\u002F05.mcp-server\u002F01.overview",{"title":249,"path":250,"stem":251,"icon":252},"Setup","\u002Fen\u002Fmcp-server\u002Fsetup","en\u002F05.mcp-server\u002F02.setup","i-hugeicons-plug-socket",{"title":254,"path":255,"stem":256,"icon":111},"What you can do with it","\u002Fen\u002Fmcp-server\u002Fuse-cases","en\u002F05.mcp-server\u002F03.use-cases",{"title":258,"path":259,"stem":260,"icon":261},"Tools","\u002Fen\u002Fmcp-server\u002Ftools","en\u002F05.mcp-server\u002F04.tools","i-hugeicons-wrench-01",{"title":263,"path":264,"stem":265,"icon":76},"Approving changes","\u002Fen\u002Fmcp-server\u002Fapproving-changes","en\u002F05.mcp-server\u002F05.approving-changes",{"title":267,"path":268,"stem":269,"icon":270},"Administration & security","\u002Fen\u002Fmcp-server\u002Fadmin-and-security","en\u002F05.mcp-server\u002F06.admin-and-security","i-hugeicons-shield-key",{"title":272,"icon":273,"path":274,"stem":275,"children":276,"page":30},"External sources","i-hugeicons-database-sync","\u002Fen\u002Fexternal-sources","en\u002F06.external-sources",[277,280,285,290,295,300,305],{"title":245,"path":278,"stem":279,"icon":273},"\u002Fen\u002Fexternal-sources\u002Foverview","en\u002F06.external-sources\u002F01.overview",{"title":281,"path":282,"stem":283,"icon":284},"SharePoint","\u002Fen\u002Fexternal-sources\u002Fsharepoint","en\u002F06.external-sources\u002F02.sharepoint","i-hugeicons-microsoft",{"title":286,"path":287,"stem":288,"icon":289},"OneDrive","\u002Fen\u002Fexternal-sources\u002Fonedrive","en\u002F06.external-sources\u002F03.onedrive","i-hugeicons-folder-cloud",{"title":291,"path":292,"stem":293,"icon":294},"Google Drive","\u002Fen\u002Fexternal-sources\u002Fgoogle-drive","en\u002F06.external-sources\u002F04.google-drive","i-hugeicons-google-drive",{"title":296,"path":297,"stem":298,"icon":299},"FTP \u002F SFTP","\u002Fen\u002Fexternal-sources\u002Fftp-sftp","en\u002F06.external-sources\u002F05.ftp-sftp","i-hugeicons-server-stack-01",{"title":301,"path":302,"stem":303,"icon":304},"REST interface","\u002Fen\u002Fexternal-sources\u002Frest","en\u002F06.external-sources\u002F06.rest","i-hugeicons-api",{"title":306,"path":307,"stem":308,"icon":309},"SOAP interface","\u002Fen\u002Fexternal-sources\u002Fsoap","en\u002F06.external-sources\u002F07.soap","i-hugeicons-source-code",{"title":311,"icon":304,"path":312,"stem":313,"children":314,"page":30},"Integration API","\u002Fen\u002Fintegration-api","en\u002F07.integration-api",[315,318,322,327,332,337,341,346,350,354,359,364],{"title":245,"path":316,"stem":317,"icon":14},"\u002Fen\u002Fintegration-api\u002Foverview","en\u002F07.integration-api\u002F01.overview",{"title":319,"path":320,"stem":321,"icon":19},"Authentication","\u002Fen\u002Fintegration-api\u002Fauthentication","en\u002F07.integration-api\u002F02.authentication",{"title":323,"path":324,"stem":325,"icon":326},"Conventions","\u002Fen\u002Fintegration-api\u002Fconventions","en\u002F07.integration-api\u002F03.conventions","i-hugeicons-book-open-01",{"title":328,"path":329,"stem":330,"icon":331},"Pushing documents","\u002Fen\u002Fintegration-api\u002Fpushing-documents","en\u002F07.integration-api\u002F04.pushing-documents","i-hugeicons-upload-02",{"title":333,"path":334,"stem":335,"icon":336},"Consuming content","\u002Fen\u002Fintegration-api\u002Fconsuming-content","en\u002F07.integration-api\u002F05.consuming-content","i-hugeicons-download-02",{"title":338,"path":339,"stem":340,"icon":137},"Reference: documents","\u002Fen\u002Fintegration-api\u002Freference-documents","en\u002F07.integration-api\u002F06.reference-documents",{"title":342,"path":343,"stem":344,"icon":345},"Reference: categories, tags, markets","\u002Fen\u002Fintegration-api\u002Freference-categories-tags","en\u002F07.integration-api\u002F07.reference-categories-tags","i-hugeicons-folder-01",{"title":347,"path":348,"stem":349,"icon":211},"Reference: sync manifest","\u002Fen\u002Fintegration-api\u002Freference-sync","en\u002F07.integration-api\u002F08.reference-sync",{"title":351,"path":352,"stem":353,"icon":309},"OpenAPI","\u002Fen\u002Fintegration-api\u002Fopenapi","en\u002F07.integration-api\u002F09.openapi",{"title":355,"path":356,"stem":357,"icon":358},"Changelog","\u002Fen\u002Fintegration-api\u002Fchangelog","en\u002F07.integration-api\u002F10.changelog","i-hugeicons-time-schedule",{"title":360,"path":361,"stem":362,"icon":363},"Reference: groups, markets, access","\u002Fen\u002Fintegration-api\u002Freference-groups-access","en\u002F07.integration-api\u002F11.reference-groups-access","i-hugeicons-user-lock-01",{"title":365,"path":366,"stem":367,"icon":368},"Moving from CMWS","\u002Fen\u002Fintegration-api\u002Fcmws","en\u002F07.integration-api\u002F12.cmws","i-hugeicons-arrow-reload-horizontal",{"title":370,"icon":371,"path":372,"stem":373,"children":374,"page":30},"What's new","i-hugeicons-gift","\u002Fen\u002Fwhats-new","en\u002F08.whats-new",[375],{"title":355,"path":376,"stem":377,"icon":358},"\u002Fen\u002Fwhats-new\u002Fchangelog","en\u002F08.whats-new\u002F01.changelog",{"title":379,"icon":299,"path":380,"stem":381,"children":382,"page":30},"Self-hosting","\u002Fen\u002Fself-hosting","en\u002F09.self-hosting",[383,386,390,395,399,404,408,413,418,422],{"title":245,"path":384,"stem":385,"icon":14},"\u002Fen\u002Fself-hosting\u002Foverview","en\u002F09.self-hosting\u002F01.overview",{"title":387,"path":388,"stem":389,"icon":106},"Docker Compose","\u002Fen\u002Fself-hosting\u002Fdocker-compose","en\u002F09.self-hosting\u002F02.docker-compose",{"title":391,"path":392,"stem":393,"icon":394},"Kubernetes","\u002Fen\u002Fself-hosting\u002Fkubernetes","en\u002F09.self-hosting\u002F03.kubernetes","i-hugeicons-cloud",{"title":396,"path":397,"stem":398,"icon":101},"Configuration","\u002Fen\u002Fself-hosting\u002Fconfiguration","en\u002F09.self-hosting\u002F04.configuration",{"title":400,"path":401,"stem":402,"icon":403},"Licence","\u002Fen\u002Fself-hosting\u002Flicence","en\u002F09.self-hosting\u002F05.licence","i-hugeicons-license",{"title":405,"path":406,"stem":407,"icon":211},"Updates","\u002Fen\u002Fself-hosting\u002Fupdates","en\u002F09.self-hosting\u002F06.updates",{"title":409,"path":410,"stem":411,"icon":412},"Postgres","\u002Fen\u002Fself-hosting\u002Fpostgres","en\u002F09.self-hosting\u002F07.postgres","i-hugeicons-database",{"title":414,"path":415,"stem":416,"icon":417},"Backups","\u002Fen\u002Fself-hosting\u002Fbackups","en\u002F09.self-hosting\u002F08.backups","i-hugeicons-database-restore",{"title":419,"path":420,"stem":421,"icon":261},"Troubleshooting","\u002Fen\u002Fself-hosting\u002Ftroubleshooting","en\u002F09.self-hosting\u002F09.troubleshooting",{"title":423,"path":424,"stem":425,"icon":426},"Firewall","\u002Fen\u002Fself-hosting\u002Ffirewall","en\u002F09.self-hosting\u002F10.firewall","i-hugeicons-firewall",{"id":428,"title":396,"body":429,"description":867,"extension":868,"links":869,"meta":870,"navigation":871,"path":397,"seo":872,"stem":398,"__hash__":873},"docs_en\u002Fen\u002F09.self-hosting\u002F04.configuration.md",{"type":430,"value":431,"toc":858},"minimark",[432,449,454,580,584,671,675,716,720,787,797,801],[433,434,435,436,440,441,444,445,448],"p",{},"An installation reads its settings from environment variables when it starts – with Docker Compose from ",[437,438,439],"code",{},".env",", with Kubernetes from ",[437,442,443],{},"config.env"," and ",[437,446,447],{},"secrets.env",". A change takes effect as soon as the service restarts. The images contain no settings; the same image runs at every customer.",[450,451,453],"h2",{"id":452},"required","Required",[455,456,457,470],"table",{},[458,459,460],"thead",{},[461,462,463,467],"tr",{},[464,465,466],"th",{},"Variable",[464,468,469],{},"Meaning",[471,472,473,488,502,512,522,536,553],"tbody",{},[461,474,475,485],{},[476,477,478,481,482],"td",{},[437,479,480],{},"DDM_CMS_HOST",", ",[437,483,484],{},"DDM_APP_HOST",[476,486,487],{},"The two host names: CMS and reader app.",[461,489,490,495],{},[476,491,492],{},[437,493,494],{},"AUTH_COOKIE_DOMAIN",[476,496,497,498,501],{},"The domain both host names share, for example ",[437,499,500],{},"company.com"," – so that a sign-in works in both apps.",[461,503,504,509],{},[476,505,506],{},[437,507,508],{},"POSTGRES_PASSWORD",[476,510,511],{},"The database password. Taken over on the first start and not changed after that.",[461,513,514,519],{},[476,515,516],{},[437,517,518],{},"BETTER_AUTH_SECRET",[476,520,521],{},"Key for sessions and tokens. At least 32 random characters; changing it signs everybody out.",[461,523,524,529],{},[476,525,526],{},[437,527,528],{},"LICENCE_KEY",[476,530,531,532,535],{},"The licence from us (",[437,533,534],{},"ddm1.…","). Needed from the first start.",[461,537,538,546],{},[476,539,540,481,543],{},[437,541,542],{},"MAIL_DRIVER",[437,544,545],{},"MAIL_FROM",[476,547,548,549,552],{},"How DDM sends e-mails: ",[437,550,551],{},"smtp"," with the details below.",[461,554,555,569],{},[476,556,557,481,560,481,563,481,566],{},[437,558,559],{},"SMTP_HOST",[437,561,562],{},"SMTP_PORT",[437,564,565],{},"SMTP_USER",[437,567,568],{},"SMTP_PASSWORD",[476,570,571,572,575,576,579],{},"Your mail server. ",[437,573,574],{},"SMTP_SECURE=true"," for TLS from the first byte (port 465), ",[437,577,578],{},"SMTP_ALLOW_SELF_SIGNED=true"," for an internal server with its own certificate authority.",[450,581,583],{"id":582},"documents","Documents",[455,585,586,594],{},[458,587,588],{},[461,589,590,592],{},[464,591,466],{},[464,593,469],{},[471,595,596,618,635,645,658],{},[461,597,598,615],{},[476,599,600,481,603,481,606,481,609,481,612],{},[437,601,602],{},"S3_ENDPOINT",[437,604,605],{},"S3_BUCKET",[437,607,608],{},"S3_REGION",[437,610,611],{},"S3_ACCESS_KEY_ID",[437,613,614],{},"S3_SECRET_ACCESS_KEY",[476,616,617],{},"The documents in an S3-compatible bucket instead of on the volume. The database backups then go to the same bucket.",[461,619,620,625],{},[476,621,622],{},[437,623,624],{},"S3_FORCE_PATH_STYLE",[476,626,627,630,631,634],{},[437,628,629],{},"true"," (default) for MinIO and most self-run storage; ",[437,632,633],{},"false"," for providers with the bucket in the host name.",[461,636,637,642],{},[476,638,639],{},[437,640,641],{},"MAX_UPLOAD_BYTES",[476,643,644],{},"The largest file anybody can upload. Default 1 GB. Your reverse proxy must let at least that much through.",[461,646,647,652],{},[476,648,649],{},[437,650,651],{},"THUMBNAILS",[476,653,654,657],{},[437,655,656],{},"off"," leaves out thumbnails – for servers with very little memory.",[461,659,660,665],{},[476,661,662],{},[437,663,664],{},"RENDER_LARGE_OFFICE",[476,666,667,670],{},[437,668,669],{},"on",": Office files over 64 MB get a PDF view too. Needs several GB of memory for the render worker.",[450,672,674],{"id":673},"network","Network",[455,676,677,685],{},[458,678,679],{},[461,680,681,683],{},[464,682,466],{},[464,684,469],{},[471,686,687,697],{},[461,688,689,694],{},[476,690,691],{},[437,692,693],{},"HTTPS_PROXY",[476,695,696],{},"A proxy for outgoing connections: licence, updates, feature requests, external sources.",[461,698,699,707],{},[476,700,701,481,704],{},[437,702,703],{},"LDAP_PRIVATE_NETWORKS",[437,705,706],{},"SOURCES_PRIVATE_NETWORKS",[476,708,709,711,712,715],{},[437,710,656],{}," forbids directories and external sources from using addresses in your own network. For you, usually leave it ",[713,714,669],"strong",{}," – your directory and your file servers are there.",[450,717,719],{"id":718},"sign-in","Sign-in",[455,721,722,730],{},[458,723,724],{},[461,725,726,728],{},[464,727,466],{},[464,729,469],{},[471,731,732,745,758,774],{},[461,733,734,742],{},[476,735,736,481,739],{},[437,737,738],{},"MICROSOFT_CLIENT_ID",[437,740,741],{},"MICROSOFT_CLIENT_SECRET",[476,743,744],{},"\"Sign in with Entra ID\" for the whole installation – an app in your Entra ID.",[461,746,747,755],{},[476,748,749,481,752],{},[437,750,751],{},"GOOGLE_CLIENT_ID",[437,753,754],{},"GOOGLE_CLIENT_SECRET",[476,756,757],{},"\"Sign in with Google Workspace\".",[461,759,760,771],{},[476,761,762,481,765,481,768],{},[437,763,764],{},"OKTA_ISSUER",[437,766,767],{},"OKTA_CLIENT_ID",[437,769,770],{},"OKTA_CLIENT_SECRET",[476,772,773],{},"\"Sign in with Okta\".",[461,775,776,781],{},[476,777,778],{},[437,779,780],{},"PASSKEY_RP_ID",[476,782,783,784,786],{},"The domain passkeys are bound to. If not set, the CMS host name – set the shared domain (for example ",[437,785,500],{},") so that a passkey works in both the CMS and the reader app.",[433,788,789,790,444,793,796],{},"Single sign-on per organisation (SAML, OpenID Connect) and directories (LDAP, Active Directory), on the other hand, you set up in DDM itself, under ",[713,791,792],{},"Settings › Single sign-on",[713,794,795],{},"Settings › Directory services",".",[450,798,800],{"id":799},"licence-and-updates","Licence and updates",[455,802,803,811],{},[458,804,805],{},[461,806,807,809],{},[464,808,466],{},[464,810,469],{},[471,812,813,830,842],{},[461,814,815,820],{},[476,816,817],{},[437,818,819],{},"LICENCE_RENEWAL",[476,821,822,824,825,796],{},[437,823,656],{}," for a server without internet access: the licence is then ",[826,827,829],"a",{"href":828},"\u002Fen\u002Fself-hosting\u002Flicence#without-internet","renewed by hand",[461,831,832,837],{},[476,833,834],{},[437,835,836],{},"UPDATE_CHECK",[476,838,839,841],{},[437,840,656],{},": the installation does not tell you when there is a new version.",[461,843,844,849],{},[476,845,846],{},[437,847,848],{},"MIGRATE_ON_START",[476,850,851,853,854,857],{},[437,852,656],{},": the CMS does not apply migrations when it starts. Only if you apply them yourself (",[437,855,856],{},"bun run db:migrate",").",{"title":859,"searchDepth":860,"depth":860,"links":861},"",2,[862,863,864,865,866],{"id":452,"depth":860,"text":453},{"id":582,"depth":860,"text":583},{"id":673,"depth":860,"text":674},{"id":718,"depth":860,"text":719},{"id":799,"depth":860,"text":800},"The settings of an installation – what each one does and when you need it.","md",null,{},{"icon":101},{"title":396,"description":867},"rJFibpoN1Lb2HHc13Kr2a89Lb-MMxfhBGtkVRVo72NA",[875,877],{"title":391,"path":392,"stem":393,"description":876,"icon":394,"children":-1},"DDM in a Kubernetes cluster – one file with everything, two with your settings, and a secret for the registry.",{"title":400,"path":401,"stem":402,"description":878,"icon":403,"children":-1},"How an installation's licence is renewed, what it allows and what happens when it runs out.",1793617723389]