Complete reference for all FOG Docker environment variables.
Variable Description Example Required FOG_WEB_HOSTServer IP/FQDN for web access 192.168.1.100Yes FOG_DB_ROOT_PASSWORDMySQL root password your-secure-passwordYes
Variable Description Example Default FOG_VERSIONFOG git ref to build (dev compose only) stable, dev-branch, working-1.6, 1.6.0-RC-6stable FOG_GIT_URLCustom FOG repository URL (dev only) https://github.com/FOGProject/fogproject.githttps://github.com/FOGProject/fogproject.git
Variable Description Example Default FOG_WEB_ROOTWeb root path for FOG /fog/fog FOG_APACHE_PORTInternal Apache HTTP port 8080 FOG_APACHE_SSL_PORTInternal Apache HTTPS port 443443 FOG_APACHE_EXPOSED_PORTExternal HTTP port mapping 8080 FOG_APACHE_EXPOSED_SSL_PORTExternal HTTPS port mapping 443443
Variable Description Example Default FOG_STORAGE_HOSTServer IP/FQDN for storage access 192.168.1.100FOG_WEB_HOST FOG_TFTP_HOSTServer IP/FQDN for TFTP access 192.168.1.100FOG_WEB_HOST FOG_WOL_HOSTServer IP/FQDN for Wake-on-LAN 192.168.1.100FOG_WEB_HOST FOG_TLS_MODETLS preset: standard, http-only, mounted-certs, public-cert, reverse-proxy standardunset → legacy infer; .env.example uses standard FOG_WEB_PROTOCOLWeb UI protocol (override) https(from mode) FOG_BOOT_PROTOCOLNetboot / boot.php chain (override) http(from mode) FOG_HTTP_PROTOCOLLegacy; mirrors FOG_WEB_PROTOCOL when mode is set https(derived) FOG_MULTICAST_INTERFACENetwork interface for multicast eth0eth0 FOG_NFS_MODENFS server: kernel or userland unfs3 unfs3kernel FOG_PRIVILEGEDCompose privileged mode. Set false when using unfs3 falsetrue
Variable Description Example Default FOG_DB_HOSTDatabase host fog-dbfog-db FOG_DB_PORTDatabase port 33063306 FOG_DB_NAMEDatabase name fogfog FOG_DB_USERDatabase user fogmasterfogmaster FOG_DB_PASSDatabase password fogmaster123fogmaster123
Variable Description Example Default FOG_DB_MIGRATION_ENABLEDEnable database migration truefalse FOG_DB_MIGRATION_FORCEForce migration over existing data truefalse
Variable Description Example Default FOG_USERFOG system user fogprojectfogproject FOG_PASSFOG system password fogftp123fogftp123
Variable Description Example Default FOG_FTP_PASV_MIN_PORTFTP passive mode minimum port 2110021100 FOG_FTP_PASV_MAX_PORTFTP passive mode maximum port 2111021110 FOG_STORAGE_NODE_SSH_HOSTSSH target for Post_Stage2 SFTP only (not client storageip=) 127.0.0.1127.0.0.1
Variable Description Example Default FOG_SECURE_BOOT_ENABLEDSign FOS kernels and publish FOG 1.6 enrollment kit (service/secureboot/) truefalse FOG_SECURE_BOOT_KEYS_DIRSecure Boot keys directory /opt/fog/secure-boot/keys/opt/fog/secure-boot/keys FOG_SECURE_BOOT_CERT_DIRSecure Boot certificates directory /opt/fog/secure-boot/certs/opt/fog/secure-boot/certs FOG_SECURE_BOOT_SHIM_DIRFallback MokManager source if TFTP tree lacks secureboot/mmx64.efi /opt/fog/secure-boot/shim/opt/fog/secure-boot/shim FOG_SECURE_BOOT_MOK_IMGLegacy optional path (unused by default 1.6 PXE enrollment) /opt/fog/secure-boot/mok-certs.img/opt/fog/secure-boot/mok-certs.img
See Secure Boot
Variable Description Example Default FOG_DHCP_ENABLEDEnable FOG’s DHCP server truefalse FOG_DHCP_SUBNETDHCP subnet 192.168.1.0- FOG_DHCP_NETMASKDHCP netmask 255.255.255.0- FOG_DHCP_ROUTERDHCP gateway 192.168.1.1- FOG_DHCP_DOMAIN_NAMEDHCP domain name fog.local-
Variable Description Example Default FOG_DHCP_START_RANGEDHCP start IP 192.168.1.100- FOG_DHCP_END_RANGEDHCP end IP 192.168.1.200-
Variable Description Example Default FOG_DHCP_BOOTFILE_BIOSBIOS boot file (Arch:00000) undionly.kkpxeundionly.kkpxe FOG_DHCP_BOOTFILE_UEFI32UEFI 32-bit boot file (Arch:00002, 00006) i386-efi/snponly.efii386-efi/snponly.efi FOG_DHCP_BOOTFILE_UEFI64UEFI 64-bit boot file (Arch:00007, 00008, 00009, plus SURFACE-PRO-4, Apple-Intel-Netboot) snponly.efisnponly.efi FOG_DHCP_BOOTFILE_ARM64UEFI ARM64 boot file (Arch:00011) arm64-efi/snponly.efiarm64-efi/snponly.efi FOG_DHCP_BOOTFILE_UEFILegacy variable (maps to UEFI64) snponly.efisnponly.efi
Variable Description Example Default FOG_DHCP_DEFAULT_LEASE_TIMEDefault lease time (seconds) 600600 FOG_DHCP_MAX_LEASE_TIMEMaximum lease time (seconds) 72007200
Variable Description Example Default FOG_DHCP_DNSDNS servers 8.8.8.88.8.8.8
Variable Description Example Default FOG_APACHE_SSL_CERT_FILEApache SSL certificate file server.crt- FOG_APACHE_SSL_KEY_FILEApache SSL key file server.key- FOG_APACHE_SSL_CNSSL certificate common name fog.example.com- FOG_CERT_SANExtra subject alternative names (comma-separated) on srvpublic.crt shortname,fog.local,192.168.1.10-
Variable Description Example Default FOG_DB_MIGRATION_ENABLEDEnable database migration truefalse FOG_DB_MIGRATION_FORCEForce migration over existing data truefalse
Variable Description Example Default TZContainer timezone America/New_YorkUTC
Variable Description Example Default DEBUGEnable debug mode truefalse FORCE_FIRST_START_INITForce FOG first start initialization truefalse
The following variables work together to define how clients access FOG services:
FOG_WEB_HOSTFOG_STORAGE_HOSTFOG_WEB_HOST)FOG_TFTP_HOSTFOG_WEB_HOST)FOG_WOL_HOSTFOG_WEB_HOST) Apache port variables control internal and external port mappings:
FOG_APACHE_PORTFOG_APACHE_SSL_PORTFOG_APACHE_EXPOSED_PORTFOG_APACHE_EXPOSED_SSL_PORT Set FOG_TLS_MODETLS Modes
FOG_TLS_MODE = standard # default: HTTPS UI, HTTP netboot
FOG_TLS_MODE = reverse-proxy # Traefik / external TLS
FOG_TLS_MODE = mounted-certs # mount fullchain.pem + privkey.pem
FOG_TLS_MODE = http-only
FOG_INTERNAL_HTTPS_ENABLEDLegacy; used only when FOG_TLS_MODE is unset true—
Prefer FOG_TLS_MODETLS Modes . FOG_HTTP_PROTOCOL (network table above) is filled from FOG_WEB_PROTOCOL after resolve.
Database variables work together for connection:
FOG_DB_HOSTFOG_DB_PORTFOG_DB_NAMEFOG_DB_USERFOG_DB_PASS DHCP variables define PXE boot configuration:
FOG_TFTP_HOSTFOG_DHCP_BOOTFILE_BIOSFOG_DHCP_BOOTFILE_UEFI32FOG_DHCP_BOOTFILE_UEFI64FOG_DHCP_BOOTFILE_ARM64FOG_DHCP_BOOTFILE_UEFI FTP passive mode requires port range configuration:
FOG_FTP_PASV_MIN_PORTFOG_FTP_PASV_MAX_PORTFOG_WEB_HOST After upload, Post_Stage2.php/images/dev/SSH/SFTP using FOG_USERFOG_PASSsshd in the container; FOG_STORAGE_NODE_SSH_HOST127.0.0.1ftp= / storage= / storageip=FOG_STORAGE_HOSTnfsGroupMembers.ngmHostnameConfiguration — Capture finalize .
# Core configuration
FOG_WEB_HOST = 192.168.1.100
FOG_DB_ROOT_PASSWORD = your-secure-password
# Network configuration (all same server)
FOG_STORAGE_HOST = 192.168.1.100
FOG_TFTP_HOST = 192.168.1.100
FOG_WOL_HOST = 192.168.1.100
FOG_TLS_MODE = standard
FOG_STORAGE_NODE_SSH_HOST = 127.0.0.1
# DHCP (use existing)
FOG_DHCP_ENABLED = false
# Core configuration
FOG_WEB_HOST = fog.example.com
FOG_DB_ROOT_PASSWORD = your-secure-password
# Network configuration (all same server)
FOG_STORAGE_HOST = fog.example.com
FOG_TFTP_HOST = fog.example.com
FOG_WOL_HOST = fog.example.com
FOG_TLS_MODE = reverse-proxy
# DHCP (use existing)
FOG_DHCP_ENABLED = false
# Core configuration
FOG_WEB_HOST = 192.168.1.100
FOG_DB_ROOT_PASSWORD = your-secure-password
# Network configuration (different servers)
FOG_STORAGE_HOST = 192.168.1.101
FOG_TFTP_HOST = 192.168.1.102
FOG_WOL_HOST = 192.168.1.100
FOG_TLS_MODE = http-only
# DHCP (use existing)
FOG_DHCP_ENABLED = false
# Core configuration
FOG_WEB_HOST = 192.168.1.100
FOG_DB_ROOT_PASSWORD = your-secure-password
# Network configuration
FOG_STORAGE_HOST = 192.168.1.100
FOG_TFTP_HOST = 192.168.1.100
FOG_WOL_HOST = 192.168.1.100
FOG_TLS_MODE = http-only
# DHCP configuration
FOG_DHCP_ENABLED = true
FOG_DHCP_SUBNET = 192.168.1.0
FOG_DHCP_NETMASK = 255.255.255.0
FOG_DHCP_ROUTER = 192.168.1.1
FOG_DHCP_DOMAIN_NAME = fog.local
FOG_DHCP_START_RANGE = 192.168.1.100
FOG_DHCP_END_RANGE = 192.168.1.200
FOG_DHCP_DNS = 8.8.8.8
FOG_DHCP_BOOTFILE_BIOS = undionly.kkpxe
FOG_DHCP_BOOTFILE_UEFI32 = i386-efi/snponly.efi
FOG_DHCP_BOOTFILE_UEFI64 = snponly.efi
FOG_DHCP_BOOTFILE_ARM64 = arm64-efi/snponly.efi
FOG_DHCP_BOOTFILE_UEFI = snponly.efi
# Core configuration
FOG_WEB_HOST = fog.example.com
FOG_DB_ROOT_PASSWORD = your-secure-password
# Network configuration
FOG_STORAGE_HOST = fog.example.com
FOG_TFTP_HOST = fog.example.com
FOG_WOL_HOST = fog.example.com
FOG_TLS_MODE = mounted-certs
# SSL configuration
FOG_APACHE_SSL_CERT_FILE = fullchain.pem
FOG_APACHE_SSL_KEY_FILE = privkey.pem
# DHCP (use existing)
FOG_DHCP_ENABLED = false
# Core configuration
FOG_WEB_HOST = 192.168.1.100
FOG_DB_ROOT_PASSWORD = your-secure-password
# Network configuration
FOG_STORAGE_HOST = 192.168.1.100
FOG_TFTP_HOST = 192.168.1.100
FOG_WOL_HOST = 192.168.1.100
FOG_TLS_MODE = standard
# SSL configuration
FOG_APACHE_SSL_CN = 192.168.1.100
FOG_CERT_SAN = shortname,alt1.domain.com,192.168.1.10
# DHCP (use existing)
FOG_DHCP_ENABLED = false
# Check required variables are set
if [ -z " $FOG_WEB_HOST " ] ; then
echo "ERROR: FOG_WEB_HOST is required"
exit 1
fi
if [ -z " $FOG_DB_ROOT_PASSWORD " ] ; then
echo "ERROR: FOG_DB_ROOT_PASSWORD is required"
exit 1
fi
# Check network configuration
echo "Web Host: $FOG_WEB_HOST "
echo "Storage Host: ${ FOG_STORAGE_HOST :- $FOG_WEB_HOST } "
echo "TFTP Host: ${ FOG_TFTP_HOST :- $FOG_WEB_HOST } "
echo "WOL Host: ${ FOG_WOL_HOST :- $FOG_WEB_HOST } "
echo "TLS mode: ${ FOG_TLS_MODE :- (infer from legacy) } "
echo "Web protocol: ${ FOG_WEB_PROTOCOL :-${ FOG_HTTP_PROTOCOL :- http }} "
Use strong passwords for database and FOG user accountsSet appropriate timezone for your locationConfigure FTP passive ports for firewall compatibilityUse HTTPS in production environmentsRegular backup of environment configurationDocument custom configurations for team members After configuring environment variables:
Installation Guide Configuration Guide Troubleshooting Guide