Configuration

Set on the pando service in docker-compose.yml, or in the environment.

Variable	Default	Purpose
`PANDO_PORT`	`8080`	Port the console and API are served on.
`PANDO_ADMIN_PASSWORD`	generated	Initial admin password. Read only on first run.
`PANDO_APP_PORT_START` / `_END`	`9000` / `9019`	Range of host ports apps are given. Sets both what Compose publishes and what Pando allocates.
`PANDO_BASE_DOMAIN`	`localtest.me`	Domain per-app subdomains are taken from, when using hostname routing.
`PANDO_DATABASE_URL`	the bundled Postgres	Point Pando at an existing database instead.
`PANDO_SERVER_EXTERNAL_URL`	—	The address browsers reach Pando on, such as `https://pando.example.com`. Set this whenever something else terminates TLS — it is what marks the session cookie `Secure`.
`PANDO_POLICY_<SETTING>`	—	Fixes a host policy setting, such as `PANDO_POLICY_MIN_SECURITY_SCORE=70`. It cannot then be changed in the console. Compose passes only the variables listed on the `pando` service, so add it there. See the reference.