CONFIG_FILE.md

April 23, 2026 ยท View on GitHub

Main Config file parameters

PARAMETERDESCRIPTION
SATELLITE_PATHThis variable is set during installation and should not be changed
LOG_PATHThis variable is set during installation and should not be changed
PRINT_LOGIf this entry is set to True, additional timestamps for the individual sub-functions are added to the scan log. By default this entry is set to False
VENDORS_DBThis variable is set during installation and should not be changed
QUERY_MYIP_SERVERThe satellite uses this URL to check the current public IP
QUERY_MYIP_SERVER_FALLBACKFallback URL used when the primary public IP service is not reachable or returns an invalid response. The fallback service must return JSON with an ip field.
INTERNET_DETECTIONActivates or deactivates the public IP check (the parameter currently has no function)
SATELLITE_TOKENThis token (48 alphanumeric characters long) is generated by Pi.Alert and must be entered here. It uniquely identifies this satellite within the Pi.Alert instance
SATELLITE_PASSWORDThe password (96 alphanumeric characters long) is generated by Pi.Alert individually for each satellite and must be entered here.
SATELLITE_MASTER_URLThis is the URL of the API to which the satellite sends its scan results. This can either be Pi.Alert directly or an external web server on which the API for proxy mode has been installed. It is important to note that the URL must be specified in full, including the endpoint, even when submitted directly (e.g., http://YOUR_IP_OR_HOSTNAME/pialert/api/satellite.php)
PROXY_MODEActivates the proxy mode in the satellite. If the satellite informs the API that it is working in proxy mode, the API does not attempt to unpack the received data.
SATELLITE_ERROR_REPORTThis can be used to activate notification of satellite transmission errors.
NETWORK_DNS_SERVERFor host name resolving

Mail-Account Settings

OptionDescription
SMTP_SERVERAddress of the e-mail server (e.g. smtp.gmail.com)
SMTP_PORTThe port of the SMTP server. The port may vary depending on the server configuration.
SMTP_USERUser name
SMTP_PASSPassword
SMTP_SKIP_TLSIf this entry is set to True, transport encryption of the e-mail is enabled. If the server does not support this, the entry must be set to False.
SMTP_SKIP_LOGINThere are SMTP servers which do not require a login. In such a case, this value can be set to True.
FRIENDLY_NAMEFriendly display name used for notification mails.
MAIL_FROMSender address used for notification mails. By default it is built from FRIENDLY_NAME and SMTP_USER.
MAIL_TODestination e-mail address for notifications.
COLLECT_REPORTS_FOR_MAILThis parameter defines the threshold at which notification of transmission errors takes place. The saved logs are attached to the mail. After this mail, further error notifications are stopped until a successful transmission has taken place.

Fritzbox Configuration

OptionDescription
FRITZBOX_ACTIVEIf a Fritzbox is used in the network, it can be used as a data source. This can be activated or deactivated at this point.
FRITZBOX_IPIP address of the Fritzbox.
FRITZBOX_USERThis assumes that the Fritzbox is configured for a login with username and password, instead of password only. A login with password only is not supported.
FRITZBOX_PASSPassword

Mikrotik Configuration

OptionDescription
MIKROTIK_ACTIVEIf a Mikrotik router is used in the network, it can be used as a data source. This can be enabled or disabled at this point.
MIKROTIK_IPIP address of the Mikrotik router.
MIKROTIK_USERUsername
MIKROTIK_PASSPassword

UniFi Configuration

OptionDescription
UNIFI_ACTIVEIf a UniFi system is used in the network, it can be used as a data source. This can be enabled or disabled at this point.
UNIFI_IPIP address of the Unifi system.
UNIFI_APIPossible UNIFI APIs are v4, v5, unifiOS, UDMP-unifiOS, default
UNIFI_USERUsername
UNIFI_PASSPassword

OpenWRT Configuration

OptionDescription
OPENWRT_ACTIVEThe package luci-mod-rpcneed to be installed, on your OpenWrt router. If a OpenWRT is used in the network, it can be used as a data source. This can be activated or deactivated at this point.
OPENWRT_IPIP address of the OpenWRT router.
OPENWRT_USERUsername
OPENWRT_PASSPassword

AsusWRT Configuration

OptionDescription
ASUSWRT_ACTIVEIf a Asus Router is used in the network, it can be used as a data source. This can be activated or deactivated at this point.
ASUSWRT_IPIP address of the router.
ASUSWRT_USERUsername
ASUSWRT_PASSPassword
ASUSWRT_SSLWhether SSL is used or not

Pi-hole Configuration

OptionDescription
PIHOLE_ACTIVEThis variable is set during installation.
PIHOLE_DHCP_ACTIVEThis variable is valid for the DHCP server of Pihole 5.x as well as for 6.x
PIHOLE6_URLIf you want to access the Pi-hole data of version 6, enter the URL to the web interface (without the "/admin" suffix) here.
PIHOLE6_PASSWORDEnter the password for the Pi-hole web interface here.
PIHOLE6_API_MAXCLIENTSSpecifies the maximum number of clients that are returned as a response from the API

pfSense Configuration

OptionDescription
PFSENSE_ACTIVEEnables or disables pfSense as a data source for the satellite scan.
PFSENSE_IPIP address or host name of the pfSense system.
PFSENSE_PORTAPI port of the pfSense system.
PFSENSE_APIKEYAPI key used for pfSense API access.
PFSENSE_SSLEnables HTTPS for the pfSense API connection when set to True.
PFSENSE_EXCLUDE_INTList of interface names that should be ignored when processing ARP data.

OPNsense Configuration

OptionDescription
OPNSENSE_ACTIVEEnables or disables OPNsense as a data source for the satellite scan.
OPNSENSE_IPIP address or host name of the OPNsense system.
OPNSENSE_PORTAPI port of the OPNsense system.
OPNSENSE_APIKEYAPI key used for OPNsense API access.
OPNSENSE_APISECRETAPI secret used together with the API key for OPNsense authentication.
OPNSENSE_SSLEnables HTTPS for the OPNsense API connection when set to True.
OPNSENSE_EXCLUDE_INTList of interface names that should be ignored when processing ARP data.

AdGuard Configuration

OptionDescription
ADGUARD_ACTIVEEnables or disables AdGuard as a data source for the satellite scan.
ADGUARD_IPIP address or host name of the AdGuard server.
ADGUARD_PORTPort of the AdGuard web/API interface.
ADGUARD_USERUser name for the AdGuard login.
ADGUARD_PASSWORDPassword for the AdGuard login.
ADGUARD_SSLEnables HTTPS for the AdGuard connection when set to True.
ADGUARD_QUERY_LIMITMaximum number of DNS query log entries requested per scan to determine the current client activity state.

Back