Self-host taskview-community

taskview-community README

How to install taskview-community

DB_HOST, DB_USER, DB_PASSWORD, DB_NAME, DB_PORT, JWT_SIGN, APP_URL, ENCRYPTION_KEY

mkdir taskview && cd taskview

docker compose up -d

How to configure taskview-community

• ACCESS_LIFE_TIME=1d
• ALLOW_PUBLIC_REGISTRATION=trueSet to false to close the instance so accounts are created by invitation only.

  Set to false to close the instance so accounts are created by invitation only.

  values: true, false

• ANALYTICS_SECTIONSAnalytics (optional) Comma-separated list of section IDs to enable in the analytics page. When unset, all sections are available. When set, only the listed IDs are available — in the order they appear here. Example:

  Analytics (optional) Comma-separated list of section IDs to enable in the analytics page. When unset, all sections are available. When set, only the listed IDs are available — in the order they appear here. Example:

• API_PUBLIC_URLPublic URL of the API server as external systems see it; used for SSO callback/ACS URL and the SCIM endpoint.

  Public URL of the API server as external systems see it; used for SSO callback/ACS URL and the SCIM endpoint.

• API_URL=http://localhost:1401
• APP_PORT=1401Application

  Application

• APP_URL=http://localhost:3000
• AUTH_LOGIN_METHODSComma-separated list of login methods to offer on the login page (unset = all enabled).

  Comma-separated list of login methods to offer on the login page (unset = all enabled).

  values: magic-link, password, sso, social

• CENTRIFUGO_API_KEYCentrifugo API key for server-to-server communication.

  Centrifugo API key for server-to-server communication.

• CENTRIFUGO_API_URLInternal Centrifugo API URL for real-time notifications.

  Internal Centrifugo API URL for real-time notifications.

• CENTRIFUGO_PUBLIC_PORTPublic port that clients use to connect to Centrifugo (exposed port, not internal docker port)

  Public port that clients use to connect to Centrifugo (exposed port, not internal docker port)

• CENTRIFUGO_PUBLIC_URLFull WebSocket URL for browser clients to reach Centrifugo.

  Full WebSocket URL for browser clients to reach Centrifugo.

• CENTRIFUGO_TOKEN_SECRETSecret for generating Centrifugo client connection tokens (HMAC).

  Secret for generating Centrifugo client connection tokens (HMAC).

• DB_HOST=localhostDatabase Configuration

  Database Configuration

• DB_NAME=tv_3_dev_db
• DB_PASSWORD
• DB_POOL_MAX=20Maximum Postgres connections per API worker (each worker opens its own pool).

  Maximum Postgres connections per API worker (each worker opens its own pool).

• DB_PORT=5432
• DB_USER=postgres
• ENCRYPTION_KEY32-byte hex string (64 characters). Required for SSO and integrations.

  32-byte hex string (64 characters). Required for SSO and integrations.

• FILE_MAX_SIZE_MB=10Maximum size of one uploaded file in megabytes.

  Maximum size of one uploaded file in megabytes.

• FILE_QUOTA_MODE=enforceQuota mode for organization file storage: enforce rejects uploads over the quota with 507; off disables quotas.

  Quota mode for organization file storage: enforce rejects uploads over the quota with 507; off disables quotas.

  values: enforce, off

• FILE_QUOTA_ORGANIZATION_MB=100Default file-storage quota of every organization, in megabytes.

  Default file-storage quota of every organization, in megabytes.

• FILE_STORAGE_LOCAL_DIRDirectory for the local provider; in Docker mount it as a volume.

  Directory for the local provider; in Docker mount it as a volume.

• FILE_STORAGE_PROVIDERTask attachments provider that receives new uploads; its settings must be present or attachments stay disabled.

  Task attachments provider that receives new uploads; its settings must be present or attachments stay disabled.

  values: local, s3

• FILE_STORAGE_S3_ACCESS_KEYAccess key id for the s3 file-storage provider.

  Access key id for the s3 file-storage provider.

• FILE_STORAGE_S3_BUCKETBucket name for the s3 file-storage provider.

  Bucket name for the s3 file-storage provider.

• FILE_STORAGE_S3_ENDPOINTCustom endpoint for S3-compatible storage (MinIO, Cloudflare R2, Backblaze B2). Leave empty for AWS.

  Custom endpoint for S3-compatible storage (MinIO, Cloudflare R2, Backblaze B2). Leave empty for AWS.

• FILE_STORAGE_S3_FORCE_PATH_STYLE=falseSet to true for MinIO and most self-hosted S3-compatible servers.

  Set to true for MinIO and most self-hosted S3-compatible servers.

  values: true, false

• FILE_STORAGE_S3_REGIONRegion for the s3 file-storage provider. Any value works for MinIO.

  Region for the s3 file-storage provider. Any value works for MinIO.

• FILE_STORAGE_S3_SECRET_KEYSecret access key for the s3 file-storage provider.

  Secret access key for the s3 file-storage provider.

• FIREBASE_CREDENTIALS_PATHPath to Firebase service account JSON file for native mobile push notifications.

  Path to Firebase service account JSON file for native mobile push notifications.

• GITEA_API_URL
• GITEA_BASE_URL=https://gitea.comOverride for self-hosted Gitea.

  Override for self-hosted Gitea.

• GITEA_INTEGRATION_CALLBACK_URL=http://localhost:1401/module/integrations/oauth/gitea/callback
• GITEA_INTEGRATION_CLIENT_IDGitea Integration OAuth

  Gitea Integration OAuth

• GITEA_INTEGRATION_CLIENT_SECRET
• GITHUB_API_URL=https://api.github.comOverride for GitHub Enterprise API.

  Override for GitHub Enterprise API.

• GITHUB_BASE_URL=https://github.comOverride for GitHub Enterprise.

  Override for GitHub Enterprise.

• GITHUB_INTEGRATION_CALLBACK_URL=http://localhost:1401/module/integrations/oauth/github/callback
• GITHUB_INTEGRATION_CLIENT_IDGitHub Integration OAuth (separate from login OAuth)

  GitHub Integration OAuth (separate from login OAuth)

• GITHUB_INTEGRATION_CLIENT_SECRET
• GITLAB_API_URL=https://gitlab.com/api/v4Override for self-hosted GitLab API.

  Override for self-hosted GitLab API.

• GITLAB_BASE_URL=https://gitlab.comOverride for self-hosted GitLab.

  Override for self-hosted GitLab.

• GITLAB_INTEGRATION_CALLBACK_URL=http://localhost:1401/module/integrations/oauth/gitlab/callback
• GITLAB_INTEGRATION_CLIENT_IDGitLab Integration OAuth

  GitLab Integration OAuth

• GITLAB_INTEGRATION_CLIENT_SECRET
• INVITE_EMAIL_ENABLED=falseEmail a person when they are invited to a project. Requires SMTP.

  Email a person when they are invited to a project. Requires SMTP.

  values: true, false

• INVITE_EMAIL_HOURLY_LIMIT=30Maximum invite emails one user may trigger per hour.

  Maximum invite emails one user may trigger per hour.

• JWT_ALG=HS256
• JWT_SIGNJWT Configuration

  JWT Configuration

• LOG_LEVEL=info in production, debug otherwiseMinimum level written to the log files in logs/.

  Minimum level written to the log files in logs/.

  values: fatal, error, warn, info, debug, trace, silent

• NODE_ENV=developmentNode Environment

  Node Environment

• OAUTH_DYNAMIC_REGISTRATION=falseWhether AI clients may register themselves as OAuth clients (RFC 7591) when connecting to the MCP server.

  Whether AI clients may register themselves as OAuth clients (RFC 7591) when connecting to the MCP server.

  values: true, false

• PASSWORD_CHANGE_CONFIRMATION=emailHow account password changes are confirmed: email (code, needs SMTP) or password (current password).

  How account password changes are confirmed: email (code, needs SMTP) or password (current password).

  values: email, password

• PM2_INSTANCES=2Number of API worker processes (PM2 cluster mode). Accepts a number or max (one worker per CPU core).

  Number of API worker processes (PM2 cluster mode). Accepts a number or max (one worker per CPU core).

• REFRESH_LIFE_TIME=2d
• SLACK_API_BASE_URL=https://slack.com/apiOverride the Slack Web API base.

  Override the Slack Web API base.

• SLACK_AUTHORIZE_URL=https://slack.com/oauth/v2/authorizeOverride the Slack OAuth authorize URL.

  Override the Slack OAuth authorize URL.

• SLACK_CALLBACK_URLOAuth callback URL (must match the Slack app redirect URL).

  OAuth callback URL (must match the Slack app redirect URL).

• SLACK_CLIENT_IDSlack app client ID.

  Slack app client ID.

• SLACK_CLIENT_SECRETSlack app client secret.

  Slack app client secret.

• SLACK_SIGNING_SECRETSlack request signing secret - verifies inbound slash commands / interactivity.

  Slack request signing secret - verifies inbound slash commands / interactivity.

• SLACK_WEBHOOK_PREFIX=https://hooks.slack.com/Override the incoming-webhook URL prefix (used to detect legacy webhook connections).

  Override the incoming-webhook URL prefix (used to detect legacy webhook connections).

• SMTP_ENCRYPTION=ssl
• SMTP_FROM_EMAIL
• SMTP_FROM_NAME=TaskViewSender name in emails.

  Sender name in emails.

• SMTP_HOST=smtp.domain.comSMTP Configuration

  SMTP Configuration

• SMTP_PASSWORD
• SMTP_PORT=465
• SMTP_USERNAME
• SSO_TRUSTED_DOMAINSComma-separated email domains that skip DNS/HTTP ownership checks for SSO (air-gapped installs).

  Comma-separated email domains that skip DNS/HTTP ownership checks for SSO (air-gapped installs).

• TASKVIEW_API_URLPins the API server URL for the web app container; when set the server selector disappears from the login page.

  Pins the API server URL for the web app container; when set the server selector disappears from the login page.

• TASKVIEW_TOKENTaskView API token with the tvk_ prefix for the MCP client.

  TaskView API token with the tvk_ prefix for the MCP client.

• TASKVIEW_URLTaskView API server URL for the taskview-mcp client (self-hosted instance or cloud).

  TaskView API server URL for the taskview-mcp client (self-hosted instance or cloud).

• TELEGRAM_BOT_TOKENBot token from @BotFather for the Telegram notification integration.

  Bot token from @BotFather for the Telegram notification integration.

• TELEGRAM_BOT_USERNAMEBot username without @ (used to build deep-links) for the Telegram integration.

  Bot username without @ (used to build deep-links) for the Telegram integration.

• TELEGRAM_WEBHOOK_SECRETSecret verified against Telegram's X-Telegram-Bot-Api-Secret-Token header on inbound updates.

  Secret verified against Telegram's X-Telegram-Bot-Api-Secret-Token header on inbound updates.

• TRUST_PROXY=falseSet when running behind a reverse proxy so X-Forwarded-Proto/X-Forwarded-For are honoured.

  Set when running behind a reverse proxy so X-Forwarded-Proto/X-Forwarded-For are honoured.

• WEBHOOKS_ALLOW_PRIVATE_URLS=falseLet webhooks target receivers on the private network (self-hosted only).

  Let webhooks target receivers on the private network (self-hosted only).

  values: true, false