Public-facing GoTrue URL. Set to http://YOUR_SERVER_IP/gotrue (or your domain with /gotrue). Must be reachable by clients for OAuth redirects.

Target

API_EXTERNAL_URL

Default

http://YOUR_SERVER_IP/gotrue

Value

http://YOUR_SERVER_IP/gotrue

Email address of the initial admin account created on first start.

Target

GOTRUE_ADMIN_EMAIL

Default

admin@example.com

Value

admin@example.com

Password for the initial admin account.

Target

GOTRUE_ADMIN_PASSWORD

Default

changeme_admin_password

Value

changeme_admin_password

Shared JWT signing secret. MUST be identical to APPFLOWY_GOTRUE_JWT_SECRET in AppFlowy-Cloud. Minimum 32 characters. Keep private.

Target

GOTRUE_JWT_SECRET

Default

changeme_jwt_secret_min32chars!!

Value

changeme_jwt_secret_min32chars!!

GoTrue PostgreSQL connection string. Update user, password, and host if you changed them. Uses the auth schema.

Target

DATABASE_URL

Default

postgres://postgres:changeme_strong_password@AppFlowy-Postgres:5432/postgres?search_path=auth

Value

postgres://postgres:changeme_strong_password@AppFlowy-Postgres:5432/postgres?search_path=auth

JWT token lifetime in seconds. Default: 604800 (7 days).

Target

GOTRUE_JWT_EXP

Default

604800

Value

604800

Set true to skip email confirmation (recommended for initial setup). Set false to require email confirmation — you must also configure SMTP.

Target

GOTRUE_MAILER_AUTOCONFIRM

Default

true

Value

true

Set true to allow only invited users to sign up.

Target

GOTRUE_DISABLE_SIGNUP

Default

false

Value

false

Maximum emails GoTrue can send per minute.

Target

GOTRUE_RATE_LIMIT_EMAIL_SENT

Default

100

Value

100

Database driver — always postgres.

Target

GOTRUE_DB_DRIVER

Default

postgres

Value

postgres

Deep-link scheme for the AppFlowy native app.

Target

GOTRUE_SITE_URL

Default

appflowy-flutter://

Value

appflowy-flutter://

Allowed OAuth redirect URIs. ** permits all; restrict for production.

Target

GOTRUE_URI_ALLOW_LIST

Default

**

Value

**

JWT group name for admin users.

Target

GOTRUE_JWT_ADMIN_GROUP_NAME

Default

supabase_admin

Value

supabase_admin

GoTrue internal listen port. Do not change.

Target

PORT

Default

9999

Value

9999

URL path for email confirmation links.

Target

GOTRUE_MAILER_URLPATHS_CONFIRMATION

Default

/gotrue/verify

Value

/gotrue/verify

URL path for invite links.

Target

GOTRUE_MAILER_URLPATHS_INVITE

Default

/gotrue/verify

Value

/gotrue/verify

URL path for password recovery links.

Target

GOTRUE_MAILER_URLPATHS_RECOVERY

Default

/gotrue/verify

Value

/gotrue/verify

URL path for email-change confirmation links.

Target

GOTRUE_MAILER_URLPATHS_EMAIL_CHANGE

Default

/gotrue/verify

Value

/gotrue/verify

SMTP server hostname (e.g. smtp.gmail.com). Required if GOTRUE_MAILER_AUTOCONFIRM=false.

Target

GOTRUE_SMTP_HOST

SMTP port. Use 465 for TLS/SMTPS, 587 for STARTTLS.

Target

GOTRUE_SMTP_PORT

Default

465

Value

465

SMTP sender email address.

Target

GOTRUE_SMTP_USER

SMTP password.

Target

GOTRUE_SMTP_PASS

Admin email used as the From address.

Target

GOTRUE_SMTP_ADMIN_EMAIL

Minimum interval between emails to the same address. Use 1ns for no limit.

Target

GOTRUE_SMTP_MAX_FREQUENCY

Default

1ns

Value

1ns

Optional: public URL to a custom magic-link email HTML template.

Target

GOTRUE_MAILER_TEMPLATES_MAGIC_LINK

Enable Google OAuth login.

Target

GOTRUE_EXTERNAL_GOOGLE_ENABLED

Default

false

Value

false

Google OAuth client ID.

Target

GOTRUE_EXTERNAL_GOOGLE_CLIENT_ID

Google OAuth client secret.

Target

GOTRUE_EXTERNAL_GOOGLE_SECRET

Google OAuth redirect URI.

Target

GOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI

Default

http://YOUR_SERVER_IP/gotrue/callback

Value

http://YOUR_SERVER_IP/gotrue/callback

Enable GitHub OAuth login.

Target

GOTRUE_EXTERNAL_GITHUB_ENABLED

Default

false

Value

false

GitHub OAuth app client ID.

Target

GOTRUE_EXTERNAL_GITHUB_CLIENT_ID

GitHub OAuth app client secret.

Target

GOTRUE_EXTERNAL_GITHUB_SECRET

GitHub OAuth redirect URI.

Target

GOTRUE_EXTERNAL_GITHUB_REDIRECT_URI

Default

http://YOUR_SERVER_IP/gotrue/callback

Value

http://YOUR_SERVER_IP/gotrue/callback

Enable Discord OAuth login.

Target

GOTRUE_EXTERNAL_DISCORD_ENABLED

Default

false

Value

false

Discord OAuth application client ID.

Target

GOTRUE_EXTERNAL_DISCORD_CLIENT_ID

Discord OAuth application client secret.

Target

GOTRUE_EXTERNAL_DISCORD_SECRET

Discord OAuth redirect URI.

Target

GOTRUE_EXTERNAL_DISCORD_REDIRECT_URI

Default

http://YOUR_SERVER_IP/gotrue/callback

Value

http://YOUR_SERVER_IP/gotrue/callback

Enable SAML 2.0 single sign-on.

Target

GOTRUE_SAML_ENABLED

Default

false

Value

false

PEM-encoded private key for SAML 2.0 signing.

Target

GOTRUE_SAML_PRIVATE_KEY