feat: iframe configuration

2026-05-20 08:34:04 +08:00 · 2026-05-18 22:02:31 +01:00
parent b7b99cb3b2
commit 0d6538ab1a
5 changed files with 66 additions and 0 deletions
@@ -48,6 +48,13 @@ GOTENBERG_URL=

 DISABLE_TELEMETRY=false

+# Allow other sites to embed Docmost in an iframe.
+IFRAME_EMBED_ALLOWED=false
+
+# Only used when IFRAME_EMBED_ALLOWED=true. When empty, any origin is allowed.
+# Example: https://intranet.example.com,https://portal.example.com
+IFRAME_ALLOWED_ORIGINS=
+
 # Enable debug logging in production (default: false)
 DEBUG_MODE=false