.env.example

# Default environment settings for the Grafana container.
# Copy this file to `.env` and adjust values before starting the stack.
#
# Grafana admin username. Use a memorable value in development. Pick a
# unique, non-default username in production to reduce brute-force risk.
GF_SECURITY_ADMIN_USER=admin

# Grafana admin password. The example keeps `admin` for quick local testing.
# Always choose a strong, unique password for production deployments.
GF_SECURITY_ADMIN_PASSWORD=admin

# Controls whether end-users can self-register. Keep this `false` in both
# development and production unless you intentionally expose sign-up.
GF_USERS_ALLOW_SIGN_UP=false

# Enables anonymous (no login) access. Convenient for demos and local
# development. Set to `false` in production unless your dashboards are
# intended for public viewing.
GF_AUTH_ANONYMOUS_ENABLED=true

# Role Grafana assigns to anonymous viewers. `Viewer` grants read-only
# access to dashboards. Leave as `Viewer` in development. In production,
# raise or lower the permissions depending on the level of access you want
# to grant to anonymous visitors (typically keep it `Viewer` or disable
# anonymous auth entirely).
GF_AUTH_ANONYMOUS_ORG_ROLE=Viewer
# Shared configuration root consumed by docker-compose and Kubernetes kustomize
CONFIG_ROOT=./deploy/k8s/base/config