All environment variables

Generated from every template’s .env*.example. Each variable links to its entry on the template’s Environment page, which has the default, the owning feature, the template’s own comment and full notes.

Variable	Templates	In production
API_DOC_PASSWORD	react-app	Not used in production.
API_DOC_URL	react-app	Not used in production: only by yarn gen.
API_DOC_USER	react-app	Not used in production.
APP_ENV	nest-api, node-worker	production.
APP_HOST	nest-api	0.0.0.0 in a container.
APP_NAME	nest-api	Your product's display name.
BASIC_AUTH_PASS	nest-api	A strong password, not the example's.
BASIC_AUTH_USER	nest-api	A new operator username.
BETTER_AUTH_COOKIE_DOMAIN	nest-api	Empty for a single front-end origin; .example.com to share one login across subdomains.
BETTER_AUTH_COOKIE_PREFIX	nest-api	Keep the generated value (the project name).
BETTER_AUTH_SECRET	nest-api	A random 32-byte value: openssl rand -base64 32.
BETTER_AUTH_URL	nest-api	The API's public URL, like SERVER_HOST.
DATABASE_URL	nest-api, node-worker	postgresql://<user>:<password>@<host>:5432/<db>?sslmode=require.
DB_HOST	py-worker	The API's database host.
DB_NAME	py-worker	The API's database name.
DB_PASSWORD	py-worker	Its password.
DB_PORT	py-worker	5432.
DB_USER	py-worker	A database user with access to the tables this worker uses.
FRONTEND_HOST	nest-api	The front end's origin, e.g. https://app.example.com.
GROWTHBOOK_API_HOST	nest-api	https://cdn.growthbook.io or your GrowthBook's API host.
GROWTHBOOK_CLIENT_KEY	nest-api	An SDK connection's client key (sdk-…).
HEALTH_DISK_PATH	nest-api	The volume to watch: /, or where logs and uploads are written.
HEALTH_DISK_THRESHOLD	nest-api	The fraction of the volume that may be used, e.g. 0.9.
HEALTH_HEAP_MAX_MB	nest-api	Below the container's memory limit, e.g. 75% of it.
HEALTH_RSS_MAX_MB	nest-api	Below the container's memory limit.
HOME_PATH	py-worker	/app in the Docker image.
LOG_LEVEL	nest-api, node-worker	info.
MISC_CORS_ORIGINS	nest-api	Every other front-end origin, comma-separated; empty for a single front end.
OAUTH_GOOGLE_CLIENT_ID	nest-api	Your Google OAuth client id.
OAUTH_GOOGLE_CLIENT_SECRET	nest-api	The client's secret.
OPENOBSERVE_ORG	nest-api, node-worker, py-worker	The project's organization identifier.
OPENOBSERVE_TOKEN	nest-api, node-worker, py-worker	The organization's ingestion token (o2oi_…).
OPENOBSERVE_URL	nest-api, node-worker, py-worker	Your OpenObserve instance.
OTEL_SERVICE_NAME	nest-api, node-worker, py-worker	A distinct name per service: shop-api, shop-worker, shop-py.
PORT	nest-api, react-app, react-monorepo	The port the process listens on (nest-api: the container's exposed port).
PUPPETEER_EXECUTABLE_PATH	node-worker	Set by the Docker image (/usr/bin/chromium or /usr/bin/chromium-browser).
RATE_LIMIT_AUTH_MAX	nest-api	Requests per auth window per client IP (default 100).
RATE_LIMIT_AUTH_WINDOW	nest-api	better-auth's window for /auth/*, in seconds (default 10).
RATE_LIMIT_ENABLED	nest-api	true.
RATE_LIMIT_IP_HEADERS	nest-api	The header your reverse proxy sets to the client's IP (x-forwarded-for, cf-connecting-ip, …).
RATE_LIMIT_MAX	nest-api	Requests per window per client IP on app routes (default 120).
RATE_LIMIT_TTL	nest-api	The window for app routes, in milliseconds (default 60000).
REDIS_HOST	nest-api, node-worker, py-worker	Your Redis host; identical on the API and every worker.
REDIS_PASSWORD	nest-api, node-worker, py-worker	The Redis password.
REDIS_PORT	nest-api, node-worker, py-worker	Your Redis port (6379).
REDIS_USER	nest-api, node-worker, py-worker	An ACL user, if your Redis uses them.
S3_ACCESS_KEY_ID	nest-api	An access key for the bucket.
S3_BUCKET_NAME	nest-api	The bucket.
S3_ENDPOINT	nest-api	The endpoint URL, even on AWS: https://s3.<region>.amazonaws.com.
S3_REGION	nest-api	The bucket's region.
S3_SECRET_ACCESS_KEY	nest-api	Its secret.
SERVER_HOST	nest-api	The API's public URL, e.g. https://api.example.com.
SMTP_FROM	nest-api	Name <no-reply@your-domain>, on a domain with SPF, DKIM and DMARC.
SMTP_HOST	nest-api	Your mail provider's SMTP host.
SMTP_PASSWORD	nest-api	The SMTP password or API key.
SMTP_PORT	nest-api	465 or 587.
SMTP_SECURE	nest-api	true with 465, false with 587 (STARTTLS).
SMTP_SUPPORT_EMAIL	nest-api	Your support address.
SMTP_USER	nest-api	The SMTP username.
SUPERUSER_EMAIL	nest-api	The first admin's address.
SUPERUSER_PASSWORD	nest-api	A strong password, changed after first sign-in.
TEMPORAL_ADDRESS	nest-api, node-worker, py-worker	Your Temporal frontend, e.g. temporal-grpc.example.com:7233.
TEMPORAL_NAMESPACE	nest-api, node-worker, py-worker	The project's namespace, the same on the API and its workers.
TEMPORAL_TASK_QUEUE	nest-api, node-worker, py-worker	The queue a worker polls.
TEMPORAL_TLS_CA	nest-api, node-worker, py-worker	The CA that signed the server's certificate, as PEM; empty if it's publicly trusted.
TEMPORAL_TLS_CERT	nest-api, node-worker, py-worker	The project's client certificate, as PEM.
TEMPORAL_TLS_KEY	nest-api, node-worker, py-worker	The client certificate's private key, as PEM.
VITE_APP_ADMIN_HOST	react-monorepo	The admin app's origin, e.g. https://admin.example.com.
VITE_APP_ALLOWED_HOSTS	react-app	Not used in production.
VITE_APP_API_URL	react-app, react-monorepo	The API's public URL, as a build argument.
VITE_APP_AUTH_HOST	react-monorepo	The auth app's origin, e.g. https://auth.example.com.
VITE_APP_CLIENT_HOST	react-monorepo	The client app's origin, e.g. https://app.example.com.
VITE_APP_LANDING	react-monorepo	The landing site's origin, e.g. https://example.com, as a build argument.
VITE_APP_SITE_URL	react-app, react-monorepo	The canonical public origin, as a build argument.
VITE_APP_SUPPORT_EMAIL	react-app, react-monorepo	A monitored security and support address, as a build argument.
VITE_OPENOBSERVE_CLIENT_TOKEN	react-app, react-monorepo	A RUM token, as a build argument.
VITE_OPENOBSERVE_ORG	react-app, react-monorepo	The project's organization identifier, as a build argument.
VITE_OPENOBSERVE_URL	react-app, react-monorepo	Your OpenObserve instance, as a build argument.