rtmn reads RTMN_* environment variables from the systemd EnvironmentFile.
Variable List
| Variable | Required | Default | Description |
|---|---|---|---|
RTMN_TELEGRAM_TOKEN | Yes | None | Telegram bot token |
RTMN_ALLOWED_CHAT_IDS | Yes | None | Allowed chat ID list |
RTMN_SHELL_PATH | No | /bin/bash | Shell to execute |
RTMN_SHELL_ARGS | No | Empty | Shell arguments |
RTMN_AUDIT_LOG_PATH | No | /var/log/rtmn/audit.log | Audit log path |
RTMN_AUDIT_MAX_BYTES | No | 10485760 | Audit log rotation size |
RTMN_AUDIT_MAX_BACKUPS | No | 5 | Number of audit log backups |
RTMN_DEBOUNCE_MS | No | 200 | Output debounce time |
RTMN_MAX_CHUNK_SIZE | No | 3500 | Telegram output chunk size |
RTMN_POLL_TIMEOUT_SEC | No | 30 | Telegram polling timeout |
RTMN_INCOMING_RATE_PER_MIN | No | 30 | Per-chat input rate limit |
RTMN_OUTGOING_RATE_PER_SEC | No | 25 | Global output rate limit |
RTMN_OUTPUT_OVERFLOW_BYTES | No | 262144 | Output flood cutoff threshold |
RTMN_BLOCKED_INTERACTIVE | No | Built-in denylist | Interactive program denylist |
Single-Instance Environment File
The default installer creates this environment file:
/etc/rtmn/env
Recommended permissions:
owner: root
group: root
mode: 0600
Account-Isolated Environment Files
Account-isolated installations use one environment file per instance.
Examples:
/etc/rtmn/env-ops
/etc/rtmn/env-app
/etc/rtmn/env-admin
Interactive Program Denylist
If RTMN_BLOCKED_INTERACTIVE is set, it replaces the built-in denylist.
To add entries while keeping defaults, list the default entries and additions together.
Example:
RTMN_BLOCKED_INTERACTIVE=nano,vim,vi,top,htop,mysql,psql,python3