All apps · 0 apps

infisical-aio

Overview

Infisical is an open-source secrets management platform for teams, infrastructure, and application credentials.

All-In-One Unraid Edition
infisical-aio wraps the official Infisical container and bundles the required PostgreSQL and Redis services into one Unraid-first install path. It also includes a bundled Mailpit inbox so default startup and local email-dependent flows work without forcing a real SMTP relay on day one. That keeps the beginner setup small while still exposing the wider upstream configuration surface in Advanced View.

Quick Install (Beginners)

Install the template and keep the default /config and /data paths unless you have a reason to move them.
Set [code]SITE_URL[/code] to the real URL users will visit, such as [code]https://secrets.example.com[/code] or [code]http://tower.local:8080[/code].
Start the container. The wrapper will auto-generate and persist [code]ENCRYPTION_KEY[/code] and [code]AUTH_SECRET[/code] if you leave them blank, and bundled Mailpit inbox UI credentials will be stored in [code]/config/aio/generated.env[/code]. Publish [code]Local Mail Inbox Port[/code] only when you intentionally need host-network inbox access.
Either create the first account in the UI, or fill the optional [code]AIO_BOOTSTRAP_*[/code] fields in Advanced View to bootstrap the first admin and organization automatically.

Power Users (Advanced View)

Advanced View exposes the broader Infisical self-hosting environment surface, including SMTP, SSO, audit logging, telemetry, secret scanning, app connections, gateway/PAM controls, and expert network/security knobs.
Leave [code]DB_CONNECTION_URI[/code] and [code]REDIS_URL[/code] blank for the easiest bundled path. Set them only if you want to use external PostgreSQL or Redis instead of the embedded services.
Leave [code]SMTP_HOST[/code] blank for the bundled local Mailpit inbox, or point it at a real external SMTP server if you do not want the bundled inbox.
If you enable Prometheus metrics export, publish the optional [code]9464[/code] metrics port in Advanced View so your scraper can reach it.

Important Notes

The default AIO path embeds PostgreSQL and Redis for convenience. That is simpler for first boot, but it is not the same as a highly available production deployment.
Infisical itself recommends external high-availability PostgreSQL and Redis for more serious production deployments.
The bundled Mailpit inbox is for local or lab use. It is not a production mail relay and should not be confused with real deliverability infrastructure.
[code]SITE_URL[/code] matters. If you set it wrong, browser flows, links, email behavior, and some integrations will break in subtle ways.
If you enable automatic bootstrap, you are creating a highly privileged instance-admin identity during first boot. Treat those credentials carefully.

Readme

View on GitHub

infisical-aio

An Unraid-first, single-container deployment of Infisical for people who want the easiest reliable self-hosted install without manually wiring PostgreSQL and Redis on day one.

infisical-aio is opinionated for a predictable beginner install, but it does not hide the real tradeoffs: this is still a serious secrets-management platform, SITE_URL still needs to be correct, backups still matter, and the bundled database/cache path is convenience infrastructure rather than the ideal long-term production topology.

What This Image Includes

Infisical web UI and API on port 8080
Embedded PostgreSQL 16 for the default beginner path
Embedded Redis 7 for the default beginner path
Embedded Mailpit inbox for local or lab SMTP capture on the default beginner path
Persistent /config storage for generated wrapper state and bootstrap artifacts
Persistent /data storage for bundled PostgreSQL and Redis state
Automatic generation and persistence of ENCRYPTION_KEY and AUTH_SECRET when you leave them blank
Automatic generation and persistence of bundled Mailpit UI credentials when you leave them blank
Optional first-run bootstrap flow for the initial admin account and organization
Unraid CA template at infisical-aio.xml

Beginner Install

If you want the simplest supported path:

Install the Unraid template.
Leave the default /config and /data paths in place unless you have a reason to move them.
Set SITE_URL to the real URL users will visit, such as https://secrets.example.com or http://tower.local:8080.
Start the container and wait for the API to come up.
If you want to inspect local mail from the host network, set Local Mail Inbox Port in Advanced View, then open the bundled Mailpit inbox on that chosen port and read the generated AIO_MAILPIT_UI_USERNAME / AIO_MAILPIT_UI_PASSWORD values from /config/aio/generated.env.
Create the first account in the UI, or set the optional AIO_BOOTSTRAP_* fields in Advanced View to auto-bootstrap it.

If you leave the important secrets blank, the wrapper will:

generate and persist ENCRYPTION_KEY
generate and persist AUTH_SECRET
create and use an internal PostgreSQL database
create and use an internal Redis instance
create and use a bundled local Mailpit inbox unless you configure external SMTP
disable product telemetry by default

Power User Surface

This repo is deliberately not a stripped-down wrapper. Advanced View exposes the broader practical Infisical self-hosted environment surface plus the AIO defaults for the bundled PostgreSQL + Redis path. In Advanced View you can:

point Infisical at external PostgreSQL with DB_CONNECTION_URI or the upstream DB fields
point Infisical at external Redis, Redis Sentinel, or Redis Cluster instead of the bundled instance
use the bundled Mailpit inbox for local or lab email-dependent flows, or configure external SMTP for real delivery
expose the wider upstream SSO, audit log, telemetry, secret scanning, gateway, PAM, HSM, and app-connection settings
keep the bundled internal defaults for the easiest install while still retaining the normal escape hatches when you need them

The wrapper still defaults to the internal bundled services so new Unraid users are not forced into extra containers on day one.

Additional advanced wrapper-specific knobs worth knowing about:

AIO_ENABLE_BUNDLED_MAILPIT to keep or disable the bundled local inbox when SMTP_HOST is blank
Local Mail Inbox Port if you intentionally want host-network access to the bundled Mailpit inbox UI
AIO_MAILPIT_UI_USERNAME and AIO_MAILPIT_UI_PASSWORD if you want to override the generated inbox UI credentials
NODE_EXTRA_CA_CERTS if your external Redis or other upstream dependency uses a private or self-signed CA; point it at a PEM file under /config, such as /config/aio/certs/custom-ca.pem
optional host port 9464 when you enable OTEL_TELEMETRY_COLLECTION_ENABLED=true with OTEL_EXPORT_TYPE=prometheus

Runtime Notes

The bundled internal services are pinned to PostgreSQL 16 and Redis 7.x because those are within Infisical's currently documented support range.
The bundled local inbox is Mailpit, running with UI auth enabled, SMTP kept internal to the container, remote CSS/fonts blocked, version checks disabled, and SQLite WAL disabled for Unraid-friendly persistence.
The default AIO path embeds PostgreSQL and Redis for convenience. For more serious production deployments, Infisical recommends external high-availability PostgreSQL and Redis.
The bundled Mailpit inbox is for local or lab use. It helps first boot and local mail-dependent flows, but it is not a production mail relay and should not be mistaken for real deliverability infrastructure.
SITE_URL matters. If you set it wrong, browser flows, links, email behavior, and some integrations will break in subtle ways.
If you enable automatic bootstrap, you are creating a highly privileged instance-admin identity during first boot. Treat those credentials carefully.
If you plan to expose this publicly, treat your reverse proxy, SMTP, app credentials, and backup strategy as part of the deployment rather than optional cleanup.

Publishing and Releases

Wrapper releases use the upstream version plus an AIO revision, such as v0.159.16-aio.1.
Upstream monitoring, release preparation, registry publishing, and catalog sync are owned by aio-fleet from .aio-fleet.yml.
Changelog generation and XML <Changes> sync are run centrally by aio-fleet during release preparation.
main publishes latest, the pinned upstream version tag, the explicit AIO package tag, and sha-<commit> to Docker Hub.
Publish jobs require Docker Hub credentials.

See docs/releases.md for the central release process details.

Validation

Required local validation is split between app-specific tests and aio-fleet:

python3 -m venv .venv-local
.venv-local/bin/pip install -e "../aio-fleet[app-tests]"
.venv-local/bin/pytest tests/template --junit-xml=reports/pytest-unit.xml -o junit_family=xunit1
.venv-local/bin/pytest tests/integration -m integration --junit-xml=reports/pytest-integration.xml -o junit_family=xunit1
cd ../aio-fleet
.venv/bin/python -m aio_fleet validate-repo --repo infisical-aio --repo-path ../infisical-aio
.venv/bin/python -m aio_fleet trunk run --repo infisical-aio --repo-path ../infisical-aio --no-fix

The extended runtime matrix now lives behind an opt-in pytest marker so the deeper bundled-vs-external coverage still runs through the shared suite:

INFISICAL_ENABLE_RUNTIME_MATRIX=1 \
.venv-local/bin/pytest tests/integration/test_runtime_matrix.py -m extended_integration

CI cost model:

relevant PRs and main pushes run the fast validation layers first
Docker-backed integration tests run for build-relevant changes, for main release-metadata commits when publish is still in play, and for manual dispatches
image publish stays gated behind the integration suite instead of treating skipped integration as acceptable
the extended runtime matrix stays opt-in because it is materially more expensive than the required gate

That manual proof helper covers:

bundled PostgreSQL + Redis boot cleanly
bundled Mailpit boots cleanly, requires UI auth, and verifies successfully as Infisical's default local SMTP target
manual ENCRYPTION_KEY and AUTH_SECRET overrides are honored without being rewritten into /config/aio/generated.env
automatic AIO_BOOTSTRAP_* bootstrap completes, can persist the saved response artifact, and can drive a real account-recovery email into bundled Mailpit
/config/aio/generated.env persists unchanged across restart
external PostgreSQL keeps the bundled PostgreSQL service idle for both DB_CONNECTION_URI and upstream DB_HOST/DB_PORT/DB_USER/DB_PASSWORD/DB_NAME
external Redis keeps the bundled Redis service idle for REDIS_URL, Redis Sentinel, and Redis Cluster
external SMTP can be validated against an external Mailpit container while the bundled Mailpit service stays idle
private-CA rediss:// works when NODE_EXTRA_CA_CERTS points at a mounted PEM bundle
Prometheus metrics are exposed on /metrics when OTEL_TELEMETRY_COLLECTION_ENABLED=true and OTEL_EXPORT_TYPE=prometheus

Still manual:

reverse proxy, TLS, and secure-cookie behavior for your real SITE_URL
real SMTP delivery, SMTP custom-CA mail flows, and provider-specific deliverability behavior
external PostgreSQL TLS/root-cert validation
Redis Sentinel/Cluster auth and TLS combinations beyond the locally validated no-auth path
SSO/provider-specific integrations and enterprise feature integrations
Unraid UI behavior in the CA template editor itself

Community Apps Sync

This repo is the source repo. The CA-facing XML and icon should be synced into JSONbored/awesome-unraid only after:

local validation passes
the image is publishable
the support thread content is ready

Support

Repo issues: JSONbored/infisical-aio issues
Upstream app: Infisical/infisical
Official docs: infisical.com/docs

Funding

If this work saves you time, support it here:

Star History

Media gallery

1 / 3

Install infisical-aio on Unraid in a few clicks.

Find infisical-aio in Community Apps on your Unraid server, review the template, and click Install. Unraid handles the Docker app or plugin setup from the published template.

Open the Apps tab on your Unraid server Search Community Apps for infisical-aio Review the template variables and paths Click Install

Explore Unraid OS

Requirements

Use a correct public or LAN SITE_URL and back up both your PostgreSQL data and the persisted ENCRYPTION_KEY. For larger or higher-availability deployments, move PostgreSQL and Redis out of the bundled container and use the advanced external override fields.

Related apps

Explore more like this

Explore all

Security Utilities apps

Links

Projectgithub.com Supportgithub.com Docker Hubhub.docker.com Templateraw.githubusercontent.com

Details

Repository

jsonbored/infisical-aio:latest

Registry

https://hub.docker.com/r/jsonbored/infisical-aio

Last Updated2026-06-18

First Seen2026-04-21

Runtime arguments

Web UI: http://[IP]:[PORT:8080]
Network: bridge
Shell: sh
Privileged: false

Template configuration

Web UI PortPorttcp

Main Infisical web and API port.

Target: 8080
Default: 8080
Value: 8080

Local Mail Inbox PortPorttcp

Optional host port for the bundled Mailpit inbox UI used in local or lab email capture. Leave blank unless you intentionally need inbox UI access from the host network.

Target: 8025

Prometheus Metrics PortPorttcp

Optional host port for OTEL Prometheus metrics. Leave blank unless you enable OTEL_TELEMETRY_COLLECTION_ENABLED=true and OTEL_EXPORT_TYPE=prometheus.

Target: 9464

AppData - ConfigPathrw

Persistent wrapper state, generated first-run secrets, and optional bootstrap artifacts.

Target: /config
Default: /mnt/user/appdata/infisical-aio/config
Value: /mnt/user/appdata/infisical-aio/config

AppData - DataPathrw

Persistent bundled PostgreSQL and Redis data for the default AIO path.

Target: /data
Default: /mnt/user/appdata/infisical-aio/data
Value: /mnt/user/appdata/infisical-aio/data

Site URLVariable

Canonical public URL for your instance, including http or https. This should match the real URL users and reverse proxies will use.

Target: SITE_URL
Default: http://tower.local:8080
Value: http://tower.local:8080

Encryption KeyVariable

Optional manual override for the platform encryption key. Leave blank to let the wrapper generate and persist it automatically.

Target: ENCRYPTION_KEY

Auth SecretVariable

Optional manual override for the JWT auth secret. Leave blank to let the wrapper generate and persist it automatically.

Target: AUTH_SECRET

Initial Organization NameVariable

Optional default organization name shown during initial signup when you are not using API bootstrap.

Target: INITIAL_ORGANIZATION_NAME

External PostgreSQL DB_CONNECTION_URIVariable

Leave blank for the bundled PostgreSQL database. Set this to use an external Postgres instance instead.

Target: DB_CONNECTION_URI

External Redis REDIS_URLVariable

Leave blank for the bundled Redis instance. Set this to use an external Redis instance instead.

Target: REDIS_URL

[Network/Security] NODE_EXTRA_CA_CERTSVariable

Optional path to a PEM CA bundle inside the container for private or self-signed upstream certificates, such as external Redis over rediss://. Because /config is persistent, a typical path is /config/aio/certs/custom-ca.pem.

Target: NODE_EXTRA_CA_CERTS

Auto Bootstrap Admin EmailVariable

Optional first admin email for automatic instance bootstrap. Leave blank to bootstrap manually in the UI.

Target: AIO_BOOTSTRAP_EMAIL

Auto Bootstrap Admin PasswordVariable

Optional first admin password for automatic instance bootstrap.

Target: AIO_BOOTSTRAP_PASSWORD

Auto Bootstrap OrganizationVariable

Optional organization name used by the automatic bootstrap flow.

Target: AIO_BOOTSTRAP_ORGANIZATION

Auto Bootstrap Save ResponseVariable

When true, the bootstrap API response is persisted to /config/aio/bootstrap-response.json. Treat that file like a root credential.

Target: AIO_BOOTSTRAP_SAVE_RESPONSE
Default: false|true
Value: false

Bundled Local Mail InboxVariable

When true and SMTP_HOST is left blank, the wrapper runs a bundled Mailpit inbox so Infisical can send local or lab mail without requiring a real SMTP relay. Set false only if you intentionally want SMTP to stay unset until you configure an external server.

Target: AIO_ENABLE_BUNDLED_MAILPIT
Default: true|false
Value: true

Bundled Local Mail UI UsernameVariable

Optional manual username for the bundled Mailpit inbox UI. Leave blank to let the wrapper generate and persist one in /config/aio/generated.env.

Target: AIO_MAILPIT_UI_USERNAME

Bundled Local Mail UI PasswordVariable

Optional manual password for the bundled Mailpit inbox UI. Leave blank to let the wrapper generate and persist one in /config/aio/generated.env.

Target: AIO_MAILPIT_UI_PASSWORD

[SMTP] SMTP_HOSTVariable

Optional external SMTP server hostname for transactional email features. Leave blank to use the bundled local Mailpit inbox for local or lab mail capture.

Target: SMTP_HOST

[SMTP] SMTP_PORTVariable

External SMTP server port. If SMTP_HOST is blank, the wrapper uses bundled Mailpit on internal port 1025 instead.

Target: SMTP_PORT

[SMTP] SMTP_USERNAMEVariable

Optional external SMTP username.

Target: SMTP_USERNAME

[SMTP] SMTP_PASSWORDVariable

Optional external SMTP password.

Target: SMTP_PASSWORD

[SMTP] SMTP_FROM_ADDRESSVariable

Optional sender email address used for Infisical emails. When bundled Mailpit is active and this is blank, the wrapper defaults it to no-reply@infisical.local.

Target: SMTP_FROM_ADDRESS

[SMTP] SMTP_FROM_NAMEVariable

Optional sender display name. Default is Infisical.

Target: SMTP_FROM_NAME

[Telemetry] TELEMETRY_ENABLEDVariable

Usage telemetry toggle. The AIO wrapper defaults this to false for privacy-first self-hosting.

Target: TELEMETRY_ENABLED
Default: false|true
Value: false

[Advanced] KUBERNETES_AUTO_FETCH_SERVICE_ACCOUNT_TOKENVariable

Advanced upstream Infisical environment variable `KUBERNETES_AUTO_FETCH_SERVICE_ACCOUNT_TOKEN`.

Target: KUBERNETES_AUTO_FETCH_SERVICE_ACCOUNT_TOKEN
Default: false|true
Value: false

[Secret Scanning] DISABLE_SECRET_SCANNINGVariable

Advanced upstream Infisical environment variable `DISABLE_SECRET_SCANNING`.

Target: DISABLE_SECRET_SCANNING
Default: false|true
Value: false

[Advanced] DISABLE_PUBLIC_SECRET_SHARINGVariable

Advanced upstream Infisical environment variable `DISABLE_PUBLIC_SECRET_SHARING`.

Target: DISABLE_PUBLIC_SECRET_SHARING

[Redis] REDIS_USERNAMEVariable

Advanced upstream Infisical environment variable `REDIS_USERNAME`.

Target: REDIS_USERNAME

[Redis] REDIS_PASSWORDVariable

Advanced upstream Infisical environment variable `REDIS_PASSWORD`.

Target: REDIS_PASSWORD

[Redis] REDIS_SENTINEL_HOSTSVariable

Advanced upstream Infisical environment variable `REDIS_SENTINEL_HOSTS`.

Target: REDIS_SENTINEL_HOSTS

[Redis] REDIS_SENTINEL_MASTER_NAMEVariable

Advanced upstream Infisical environment variable `REDIS_SENTINEL_MASTER_NAME`.

Target: REDIS_SENTINEL_MASTER_NAME

[Redis] REDIS_SENTINEL_ENABLE_TLSVariable

Advanced upstream Infisical environment variable `REDIS_SENTINEL_ENABLE_TLS`.

Target: REDIS_SENTINEL_ENABLE_TLS

[Redis] REDIS_SENTINEL_USERNAMEVariable

Advanced upstream Infisical environment variable `REDIS_SENTINEL_USERNAME`.

Target: REDIS_SENTINEL_USERNAME

[Redis] REDIS_SENTINEL_PASSWORDVariable

Advanced upstream Infisical environment variable `REDIS_SENTINEL_PASSWORD`.

Target: REDIS_SENTINEL_PASSWORD

[Redis] REDIS_CLUSTER_HOSTSVariable

Advanced upstream Infisical environment variable `REDIS_CLUSTER_HOSTS`.

Target: REDIS_CLUSTER_HOSTS

[Redis] REDIS_READ_REPLICASVariable

Advanced upstream Infisical environment variable `REDIS_READ_REPLICAS`.

Target: REDIS_READ_REPLICAS

[Redis] REDIS_CLUSTER_ENABLE_TLSVariable

Advanced upstream Infisical environment variable `REDIS_CLUSTER_ENABLE_TLS`.

Target: REDIS_CLUSTER_ENABLE_TLS

[Redis] REDIS_CLUSTER_AWS_ELASTICACHE_DNS_LOOKUP_MODEVariable

Advanced upstream Infisical environment variable `REDIS_CLUSTER_AWS_ELASTICACHE_DNS_LOOKUP_MODE`.

Target: REDIS_CLUSTER_AWS_ELASTICACHE_DNS_LOOKUP_MODE

[Audit Logs] AUDIT_LOGS_DB_CONNECTION_URIVariable

Advanced upstream Infisical environment variable `AUDIT_LOGS_DB_CONNECTION_URI`.

Target: AUDIT_LOGS_DB_CONNECTION_URI

[Audit Logs] AUDIT_LOGS_DB_ROOT_CERTVariable

Advanced upstream Infisical environment variable `AUDIT_LOGS_DB_ROOT_CERT`.

Target: AUDIT_LOGS_DB_ROOT_CERT

[Audit Logs] CLICKHOUSE_URLVariable

Advanced upstream Infisical environment variable `CLICKHOUSE_URL`.

Target: CLICKHOUSE_URL

[Audit Logs] CLICKHOUSE_AUDIT_LOG_INSERT_SETTINGSVariable

Advanced upstream Infisical environment variable `CLICKHOUSE_AUDIT_LOG_INSERT_SETTINGS`.

Target: CLICKHOUSE_AUDIT_LOG_INSERT_SETTINGS

[Audit Logs] CLICKHOUSE_AUDIT_LOG_ENGINEVariable

Advanced upstream Infisical environment variable `CLICKHOUSE_AUDIT_LOG_ENGINE`.

Target: CLICKHOUSE_AUDIT_LOG_ENGINE

[Audit Logs] CLICKHOUSE_AUDIT_LOG_TABLE_NAMEVariable

Advanced upstream Infisical environment variable `CLICKHOUSE_AUDIT_LOG_TABLE_NAME`.

Target: CLICKHOUSE_AUDIT_LOG_TABLE_NAME

[Audit Logs] CLICKHOUSE_AUDIT_LOG_ENABLEDVariable

Advanced upstream Infisical environment variable `CLICKHOUSE_AUDIT_LOG_ENABLED`.

Target: CLICKHOUSE_AUDIT_LOG_ENABLED
Default: true|false
Value: true

[Audit Logs] AUDIT_LOG_STREAMS_ENABLEDVariable

Advanced upstream Infisical environment variable `AUDIT_LOG_STREAMS_ENABLED`.

Target: AUDIT_LOG_STREAMS_ENABLED
Default: true|false
Value: true

[Advanced] DISABLE_AUDIT_LOG_STORAGEVariable

Advanced upstream Infisical environment variable `DISABLE_AUDIT_LOG_STORAGE`.

Target: DISABLE_AUDIT_LOG_STORAGE

[Audit Logs] DISABLE_POSTGRES_AUDIT_LOG_STORAGEVariable

Advanced upstream Infisical environment variable `DISABLE_POSTGRES_AUDIT_LOG_STORAGE`.

Target: DISABLE_POSTGRES_AUDIT_LOG_STORAGE
Default: false|true
Value: false

[Database] GENERATE_SANITIZED_SCHEMAVariable

Advanced upstream Infisical environment variable `GENERATE_SANITIZED_SCHEMA`.

Target: GENERATE_SANITIZED_SCHEMA

[Advanced] FAIL_ON_SANITIZED_SCHEMA_ERRORVariable

Advanced upstream Infisical environment variable `FAIL_ON_SANITIZED_SCHEMA_ERROR`.

Target: FAIL_ON_SANITIZED_SCHEMA_ERROR

[Database] SANITIZED_SCHEMA_ROLEVariable

Advanced upstream Infisical environment variable `SANITIZED_SCHEMA_ROLE`.

Target: SANITIZED_SCHEMA_ROLE

[Advanced] MAX_LEASE_LIMITVariable

Advanced upstream Infisical environment variable `MAX_LEASE_LIMIT`.

Target: MAX_LEASE_LIMIT

[Database] DB_ROOT_CERTVariable

Advanced upstream Infisical environment variable `DB_ROOT_CERT`.

Target: DB_ROOT_CERT

[Database] DB_HOSTVariable

Advanced upstream Infisical environment variable `DB_HOST`.

Target: DB_HOST

[Database] DB_PORTVariable

Advanced upstream Infisical environment variable `DB_PORT`.

Target: DB_PORT

[Database] DB_USERVariable

Advanced upstream Infisical environment variable `DB_USER`.

Target: DB_USER

[Database] DB_PASSWORDVariable

Advanced upstream Infisical environment variable `DB_PASSWORD`.

Target: DB_PASSWORD

[Database] DB_NAMEVariable

Advanced upstream Infisical environment variable `DB_NAME`.

Target: DB_NAME

[Database] DB_READ_REPLICASVariable

Advanced upstream Infisical environment variable `DB_READ_REPLICAS`.

Target: DB_READ_REPLICAS

[Advanced] SALT_ROUNDSVariable

Advanced upstream Infisical environment variable `SALT_ROUNDS`.

Target: SALT_ROUNDS

[Advanced] ROOT_ENCRYPTION_KEYVariable

Advanced upstream Infisical environment variable `ROOT_ENCRYPTION_KEY`.

Target: ROOT_ENCRYPTION_KEY

[Advanced] QUEUE_WORKERS_ENABLEDVariable

Advanced upstream Infisical environment variable `QUEUE_WORKERS_ENABLED`.

Target: QUEUE_WORKERS_ENABLED
Default: true|false
Value: true

[Advanced] QUEUE_WORKER_PROFILEVariable

Advanced upstream Infisical environment variable `QUEUE_WORKER_PROFILE`.

Target: QUEUE_WORKER_PROFILE

[Advanced] HTTPS_ENABLEDVariable

Advanced upstream Infisical environment variable `HTTPS_ENABLED`.

Target: HTTPS_ENABLED

[Advanced] ROTATION_DEVELOPMENT_MODEVariable

Advanced upstream Infisical environment variable `ROTATION_DEVELOPMENT_MODE`.

Target: ROTATION_DEVELOPMENT_MODE

[Advanced] DAILY_RESOURCE_CLEAN_UP_DEVELOPMENT_MODEVariable

Advanced upstream Infisical environment variable `DAILY_RESOURCE_CLEAN_UP_DEVELOPMENT_MODE`.

Target: DAILY_RESOURCE_CLEAN_UP_DEVELOPMENT_MODE

[Advanced] BDD_NOCK_API_ENABLEDVariable

Advanced upstream Infisical environment variable `BDD_NOCK_API_ENABLED`.

Target: BDD_NOCK_API_ENABLED

[ACME] ACME_DEVELOPMENT_MODEVariable

Advanced upstream Infisical environment variable `ACME_DEVELOPMENT_MODE`.

Target: ACME_DEVELOPMENT_MODE

[ACME] ACME_SKIP_UPSTREAM_VALIDATIONVariable

Advanced upstream Infisical environment variable `ACME_SKIP_UPSTREAM_VALIDATION`.

Target: ACME_SKIP_UPSTREAM_VALIDATION

[ACME] ACME_DEVELOPMENT_HTTP01_CHALLENGE_HOST_OVERRIDESVariable

Advanced upstream Infisical environment variable `ACME_DEVELOPMENT_HTTP01_CHALLENGE_HOST_OVERRIDES`.

Target: ACME_DEVELOPMENT_HTTP01_CHALLENGE_HOST_OVERRIDES

[ACME] ACME_DNS_RESOLVER_SERVERSVariable

Advanced upstream Infisical environment variable `ACME_DNS_RESOLVER_SERVERS`.

Target: ACME_DNS_RESOLVER_SERVERS

[ACME] ACME_DNS_RESOLVE_RESOLVER_SERVERS_HOST_ENABLEDVariable

Advanced upstream Infisical environment variable `ACME_DNS_RESOLVE_RESOLVER_SERVERS_HOST_ENABLED`.

Target: ACME_DNS_RESOLVE_RESOLVER_SERVERS_HOST_ENABLED

[Advanced] DNS_MADE_EASY_SANDBOX_ENABLEDVariable

Advanced upstream Infisical environment variable `DNS_MADE_EASY_SANDBOX_ENABLED`.

Target: DNS_MADE_EASY_SANDBOX_ENABLED

[SMTP] SMTP_IGNORE_TLSVariable

Advanced upstream Infisical environment variable `SMTP_IGNORE_TLS`.

Target: SMTP_IGNORE_TLS
Default: false|true
Value: false

[SMTP] SMTP_REQUIRE_TLSVariable

Advanced upstream Infisical environment variable `SMTP_REQUIRE_TLS`.

Target: SMTP_REQUIRE_TLS
Default: true|false
Value: true

[SMTP] SMTP_TLS_REJECT_UNAUTHORIZEDVariable

Advanced upstream Infisical environment variable `SMTP_TLS_REJECT_UNAUTHORIZED`.

Target: SMTP_TLS_REJECT_UNAUTHORIZED
Default: true|false
Value: true

[SMTP] SMTP_HELO_HOSTVariable

Advanced upstream Infisical environment variable `SMTP_HELO_HOST`.

Target: SMTP_HELO_HOST

[SMTP] SMTP_CUSTOM_CA_CERTVariable

Advanced upstream Infisical environment variable `SMTP_CUSTOM_CA_CERT`.

Target: SMTP_CUSTOM_CA_CERT

[Advanced] COOKIE_SECRET_SIGN_KEYVariable

Advanced upstream Infisical environment variable `COOKIE_SECRET_SIGN_KEY`.

Target: COOKIE_SECRET_SIGN_KEY

[Telemetry] POSTHOG_HOSTVariable

Advanced upstream Infisical environment variable `POSTHOG_HOST`.

Target: POSTHOG_HOST

[Telemetry] POSTHOG_PROJECT_API_KEYVariable

Advanced upstream Infisical environment variable `POSTHOG_PROJECT_API_KEY`.

Target: POSTHOG_PROJECT_API_KEY

[Advanced] LOOPS_API_KEYVariable

Advanced upstream Infisical environment variable `LOOPS_API_KEY`.

Target: LOOPS_API_KEY

[Advanced] HUBSPOT_PORTAL_IDVariable

Advanced upstream Infisical environment variable `HUBSPOT_PORTAL_ID`.

Target: HUBSPOT_PORTAL_ID

[Advanced] HUBSPOT_SIGNUP_FORM_IDVariable

Advanced upstream Infisical environment variable `HUBSPOT_SIGNUP_FORM_ID`.

Target: HUBSPOT_SIGNUP_FORM_ID

[Advanced] ANNOUNCEMENTS_ENABLEDVariable

Advanced upstream Infisical environment variable `ANNOUNCEMENTS_ENABLED`.

Target: ANNOUNCEMENTS_ENABLED

[Advanced] CONTENTFUL_SPACE_IDVariable

Advanced upstream Infisical environment variable `CONTENTFUL_SPACE_ID`.

Target: CONTENTFUL_SPACE_ID

[Advanced] CONTENTFUL_DELIVERY_TOKENVariable

Advanced upstream Infisical environment variable `CONTENTFUL_DELIVERY_TOKEN`.

Target: CONTENTFUL_DELIVERY_TOKEN

[Advanced] CONTENTFUL_ENVIRONMENTVariable

Advanced upstream Infisical environment variable `CONTENTFUL_ENVIRONMENT`.

Target: CONTENTFUL_ENVIRONMENT

[Advanced] GITHUB_API_TOKENVariable

Advanced upstream Infisical environment variable `GITHUB_API_TOKEN`.

Target: GITHUB_API_TOKEN

[Advanced] JWT_AUTH_LIFETIMEVariable

Advanced upstream Infisical environment variable `JWT_AUTH_LIFETIME`.

Target: JWT_AUTH_LIFETIME

[Advanced] JWT_SIGNUP_LIFETIMEVariable

Advanced upstream Infisical environment variable `JWT_SIGNUP_LIFETIME`.

Target: JWT_SIGNUP_LIFETIME

[Advanced] JWT_REFRESH_LIFETIMEVariable

Advanced upstream Infisical environment variable `JWT_REFRESH_LIFETIME`.

Target: JWT_REFRESH_LIFETIME

[Advanced] JWT_INVITE_LIFETIMEVariable

Advanced upstream Infisical environment variable `JWT_INVITE_LIFETIME`.

Target: JWT_INVITE_LIFETIME

[Advanced] JWT_MFA_LIFETIMEVariable

Advanced upstream Infisical environment variable `JWT_MFA_LIFETIME`.

Target: JWT_MFA_LIFETIME

[Advanced] JWT_PROVIDER_AUTH_LIFETIMEVariable

Advanced upstream Infisical environment variable `JWT_PROVIDER_AUTH_LIFETIME`.

Target: JWT_PROVIDER_AUTH_LIFETIME

[Advanced] MAX_MACHINE_IDENTITY_TOKEN_AGEVariable

Advanced upstream Infisical environment variable `MAX_MACHINE_IDENTITY_TOKEN_AGE`.

Target: MAX_MACHINE_IDENTITY_TOKEN_AGE

[Advanced] LEGACY_IDENTITY_ACCESS_TOKEN_EXPIRATION_ENFORCED_ATVariable

Advanced upstream Infisical environment variable `LEGACY_IDENTITY_ACCESS_TOKEN_EXPIRATION_ENFORCED_AT`.

Target: LEGACY_IDENTITY_ACCESS_TOKEN_EXPIRATION_ENFORCED_AT

[SSO/Auth] CLIENT_ID_GOOGLE_LOGINVariable

Advanced upstream Infisical environment variable `CLIENT_ID_GOOGLE_LOGIN`.

Target: CLIENT_ID_GOOGLE_LOGIN

[SSO/Auth] CLIENT_SECRET_GOOGLE_LOGINVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_GOOGLE_LOGIN`.

Target: CLIENT_SECRET_GOOGLE_LOGIN

[SSO/Auth] CLIENT_ID_GITHUB_LOGINVariable

Advanced upstream Infisical environment variable `CLIENT_ID_GITHUB_LOGIN`.

Target: CLIENT_ID_GITHUB_LOGIN

[SSO/Auth] CLIENT_SECRET_GITHUB_LOGINVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_GITHUB_LOGIN`.

Target: CLIENT_SECRET_GITHUB_LOGIN

[SSO/Auth] CLIENT_ID_GITLAB_LOGINVariable

Advanced upstream Infisical environment variable `CLIENT_ID_GITLAB_LOGIN`.

Target: CLIENT_ID_GITLAB_LOGIN

[SSO/Auth] CLIENT_SECRET_GITLAB_LOGINVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_GITLAB_LOGIN`.

Target: CLIENT_SECRET_GITLAB_LOGIN

[SSO/Auth] CLIENT_GITLAB_LOGIN_URLVariable

Advanced upstream Infisical environment variable `CLIENT_GITLAB_LOGIN_URL`.

Target: CLIENT_GITLAB_LOGIN_URL

[SSO/Auth] DEFAULT_SAML_ORG_SLUGVariable

Advanced upstream Infisical environment variable `DEFAULT_SAML_ORG_SLUG`.

Target: DEFAULT_SAML_ORG_SLUG

[SSO/Auth] CLIENT_ID_HEROKUVariable

Advanced upstream Infisical environment variable `CLIENT_ID_HEROKU`.

Target: CLIENT_ID_HEROKU

[SSO/Auth] CLIENT_SECRET_HEROKUVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_HEROKU`.

Target: CLIENT_SECRET_HEROKU

[SSO/Auth] CLIENT_ID_VERCELVariable

Advanced upstream Infisical environment variable `CLIENT_ID_VERCEL`.

Target: CLIENT_ID_VERCEL

[SSO/Auth] CLIENT_SECRET_VERCELVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_VERCEL`.

Target: CLIENT_SECRET_VERCEL

[SSO/Auth] CLIENT_SLUG_VERCELVariable

Advanced upstream Infisical environment variable `CLIENT_SLUG_VERCEL`.

Target: CLIENT_SLUG_VERCEL

[SSO/Auth] CLIENT_ID_NETLIFYVariable

Advanced upstream Infisical environment variable `CLIENT_ID_NETLIFY`.

Target: CLIENT_ID_NETLIFY

[SSO/Auth] CLIENT_SECRET_NETLIFYVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_NETLIFY`.

Target: CLIENT_SECRET_NETLIFY

[SSO/Auth] CLIENT_ID_BITBUCKETVariable

Advanced upstream Infisical environment variable `CLIENT_ID_BITBUCKET`.

Target: CLIENT_ID_BITBUCKET

[SSO/Auth] CLIENT_SECRET_BITBUCKETVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_BITBUCKET`.

Target: CLIENT_SECRET_BITBUCKET

[SSO/Auth] CLIENT_ID_GCP_SECRET_MANAGERVariable

Advanced upstream Infisical environment variable `CLIENT_ID_GCP_SECRET_MANAGER`.

Target: CLIENT_ID_GCP_SECRET_MANAGER

[SSO/Auth] CLIENT_SECRET_GCP_SECRET_MANAGERVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_GCP_SECRET_MANAGER`.

Target: CLIENT_SECRET_GCP_SECRET_MANAGER

[SSO/Auth] CLIENT_ID_GITHUBVariable

Advanced upstream Infisical environment variable `CLIENT_ID_GITHUB`.

Target: CLIENT_ID_GITHUB

[SSO/Auth] CLIENT_SECRET_GITHUBVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_GITHUB`.

Target: CLIENT_SECRET_GITHUB

[SSO/Auth] CLIENT_ID_GITHUB_APPVariable

Advanced upstream Infisical environment variable `CLIENT_ID_GITHUB_APP`.

Target: CLIENT_ID_GITHUB_APP

[SSO/Auth] CLIENT_SECRET_GITHUB_APPVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_GITHUB_APP`.

Target: CLIENT_SECRET_GITHUB_APP

[SSO/Auth] CLIENT_PRIVATE_KEY_GITHUB_APPVariable

Advanced upstream Infisical environment variable `CLIENT_PRIVATE_KEY_GITHUB_APP`.

Target: CLIENT_PRIVATE_KEY_GITHUB_APP

[SSO/Auth] CLIENT_APP_ID_GITHUB_APPVariable

Advanced upstream Infisical environment variable `CLIENT_APP_ID_GITHUB_APP`.

Target: CLIENT_APP_ID_GITHUB_APP

[SSO/Auth] CLIENT_SLUG_GITHUB_APPVariable

Advanced upstream Infisical environment variable `CLIENT_SLUG_GITHUB_APP`.

Target: CLIENT_SLUG_GITHUB_APP

[SSO/Auth] CLIENT_ID_AZUREVariable

Advanced upstream Infisical environment variable `CLIENT_ID_AZURE`.

Target: CLIENT_ID_AZURE

[SSO/Auth] CLIENT_SECRET_AZUREVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_AZURE`.

Target: CLIENT_SECRET_AZURE

[SSO/Auth] CLIENT_ID_AWS_INTEGRATIONVariable

Advanced upstream Infisical environment variable `CLIENT_ID_AWS_INTEGRATION`.

Target: CLIENT_ID_AWS_INTEGRATION

[SSO/Auth] CLIENT_SECRET_AWS_INTEGRATIONVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_AWS_INTEGRATION`.

Target: CLIENT_SECRET_AWS_INTEGRATION

[SSO/Auth] CLIENT_ID_GITLABVariable

Advanced upstream Infisical environment variable `CLIENT_ID_GITLAB`.

Target: CLIENT_ID_GITLAB

[SSO/Auth] CLIENT_SECRET_GITLABVariable

Advanced upstream Infisical environment variable `CLIENT_SECRET_GITLAB`.

Target: CLIENT_SECRET_GITLAB

[Advanced] URL_GITLAB_URLVariable

Advanced upstream Infisical environment variable `URL_GITLAB_URL`.

Target: URL_GITLAB_URL

[Secret Scanning] SECRET_SCANNING_WEBHOOK_PROXYVariable

Advanced upstream Infisical environment variable `SECRET_SCANNING_WEBHOOK_PROXY`.

Target: SECRET_SCANNING_WEBHOOK_PROXY

[Secret Scanning] SECRET_SCANNING_WEBHOOK_SECRETVariable

Advanced upstream Infisical environment variable `SECRET_SCANNING_WEBHOOK_SECRET`.

Target: SECRET_SCANNING_WEBHOOK_SECRET

[Secret Scanning] SECRET_SCANNING_GIT_APP_IDVariable

Advanced upstream Infisical environment variable `SECRET_SCANNING_GIT_APP_ID`.

Target: SECRET_SCANNING_GIT_APP_ID

[Secret Scanning] SECRET_SCANNING_PRIVATE_KEYVariable

Advanced upstream Infisical environment variable `SECRET_SCANNING_PRIVATE_KEY`.

Target: SECRET_SCANNING_PRIVATE_KEY

[Secret Scanning] SECRET_SCANNING_ORG_WHITELISTVariable

Advanced upstream Infisical environment variable `SECRET_SCANNING_ORG_WHITELIST`.

Target: SECRET_SCANNING_ORG_WHITELIST

[Secret Scanning] SECRET_SCANNING_GIT_APP_SLUGVariable

Advanced upstream Infisical environment variable `SECRET_SCANNING_GIT_APP_SLUG`.

Target: SECRET_SCANNING_GIT_APP_SLUG

[Platform] LICENSE_SERVER_URLVariable

Advanced upstream Infisical environment variable `LICENSE_SERVER_URL`.

Target: LICENSE_SERVER_URL

[Platform] LICENSE_SERVER_KEYVariable

Advanced upstream Infisical environment variable `LICENSE_SERVER_KEY`.

Target: LICENSE_SERVER_KEY

[Platform] LICENSE_KEYVariable

Advanced upstream Infisical environment variable `LICENSE_KEY`.

Target: LICENSE_KEY

[Platform] LICENSE_KEY_OFFLINEVariable

Advanced upstream Infisical environment variable `LICENSE_KEY_OFFLINE`.

Target: LICENSE_KEY_OFFLINE

[Platform] LICENSE_SERVER_V2_ENABLEDVariable

Advanced upstream Infisical environment variable `LICENSE_SERVER_V2_ENABLED`.

Target: LICENSE_SERVER_V2_ENABLED

[Platform] LICENSE_SERVER_V2_URLVariable

Advanced upstream Infisical environment variable `LICENSE_SERVER_V2_URL`.

Target: LICENSE_SERVER_V2_URL

[Platform] LICENSE_SERVER_V2_SERVICE_KEYVariable

Advanced upstream Infisical environment variable `LICENSE_SERVER_V2_SERVICE_KEY`.

Target: LICENSE_SERVER_V2_SERVICE_KEY

[Advanced] STANDALONE_MODEVariable

Advanced upstream Infisical environment variable `STANDALONE_MODE`.

Target: STANDALONE_MODE

[Platform] INFISICAL_CLOUDVariable

Advanced upstream Infisical environment variable `INFISICAL_CLOUD`.

Target: INFISICAL_CLOUD

[Platform] INFISICAL_DEDICATEDVariable

Advanced upstream Infisical environment variable `INFISICAL_DEDICATED`.

Target: INFISICAL_DEDICATED

[Advanced] MAINTENANCE_MODEVariable

Advanced upstream Infisical environment variable `MAINTENANCE_MODE`.

Target: MAINTENANCE_MODE
Default: false|true
Value: false

[Advanced] CAPTCHA_SECRETVariable

Advanced upstream Infisical environment variable `CAPTCHA_SECRET`.

Target: CAPTCHA_SECRET

[Advanced] CAPTCHA_SITE_KEYVariable

Advanced upstream Infisical environment variable `CAPTCHA_SITE_KEY`.

Target: CAPTCHA_SITE_KEY

[Advanced] INTERCOM_IDVariable

Advanced upstream Infisical environment variable `INTERCOM_ID`.

Target: INTERCOM_ID

[Advanced] CDN_HOSTVariable

Advanced upstream Infisical environment variable `CDN_HOST`.

Target: CDN_HOST

[Telemetry] OTEL_TELEMETRY_COLLECTION_ENABLEDVariable

Advanced upstream Infisical environment variable `OTEL_TELEMETRY_COLLECTION_ENABLED`.

Target: OTEL_TELEMETRY_COLLECTION_ENABLED
Default: false|true
Value: false

[Telemetry] OTEL_EXPORT_OTLP_ENDPOINTVariable

Advanced upstream Infisical environment variable `OTEL_EXPORT_OTLP_ENDPOINT`.

Target: OTEL_EXPORT_OTLP_ENDPOINT

[Telemetry] OTEL_OTLP_PUSH_INTERVALVariable

Advanced upstream Infisical environment variable `OTEL_OTLP_PUSH_INTERVAL`.

Target: OTEL_OTLP_PUSH_INTERVAL

[Telemetry] OTEL_COLLECTOR_BASIC_AUTH_USERNAMEVariable

Advanced upstream Infisical environment variable `OTEL_COLLECTOR_BASIC_AUTH_USERNAME`.

Target: OTEL_COLLECTOR_BASIC_AUTH_USERNAME

[Telemetry] OTEL_COLLECTOR_BASIC_AUTH_PASSWORDVariable

Advanced upstream Infisical environment variable `OTEL_COLLECTOR_BASIC_AUTH_PASSWORD`.

Target: OTEL_COLLECTOR_BASIC_AUTH_PASSWORD

[Telemetry] OTEL_EXPORT_TYPEVariable

Advanced upstream Infisical environment variable `OTEL_EXPORT_TYPE`.

Target: OTEL_EXPORT_TYPE

[Telemetry] OTEL_DROP_HIGH_CARDINALITY_METERSVariable

Advanced upstream Infisical environment variable `OTEL_DROP_HIGH_CARDINALITY_METERS`.

Target: OTEL_DROP_HIGH_CARDINALITY_METERS

[Advanced] PYLON_API_KEYVariable

Advanced upstream Infisical environment variable `PYLON_API_KEY`.

Target: PYLON_API_KEY

[Advanced] DISABLE_AUDIT_LOG_GENERATIONVariable

Advanced upstream Infisical environment variable `DISABLE_AUDIT_LOG_GENERATION`.

Target: DISABLE_AUDIT_LOG_GENERATION

[Network/Security] SSL_CLIENT_CERTIFICATE_HEADER_KEYVariable

Advanced upstream Infisical environment variable `SSL_CLIENT_CERTIFICATE_HEADER_KEY`.

Target: SSL_CLIENT_CERTIFICATE_HEADER_KEY

[Network/Security] IDENTITY_TLS_CERT_AUTH_CLIENT_CERTIFICATE_HEADER_KEYVariable

Advanced upstream Infisical environment variable `IDENTITY_TLS_CERT_AUTH_CLIENT_CERTIFICATE_HEADER_KEY`.

Target: IDENTITY_TLS_CERT_AUTH_CLIENT_CERTIFICATE_HEADER_KEY

[Advanced] WORKFLOW_SLACK_CLIENT_IDVariable

Advanced upstream Infisical environment variable `WORKFLOW_SLACK_CLIENT_ID`.

Target: WORKFLOW_SLACK_CLIENT_ID

[Advanced] WORKFLOW_SLACK_CLIENT_SECRETVariable

Advanced upstream Infisical environment variable `WORKFLOW_SLACK_CLIENT_SECRET`.

Target: WORKFLOW_SLACK_CLIENT_SECRET

[Advanced] ENABLE_MSSQL_SECRET_ROTATION_ENCRYPTVariable

Advanced upstream Infisical environment variable `ENABLE_MSSQL_SECRET_ROTATION_ENCRYPT`.

Target: ENABLE_MSSQL_SECRET_ROTATION_ENCRYPT
Default: true|false
Value: true

[Advanced] PARAMS_FOLDER_SECRET_DETECTION_PATHSVariable

Advanced upstream Infisical environment variable `PARAMS_FOLDER_SECRET_DETECTION_PATHS`.

Target: PARAMS_FOLDER_SECRET_DETECTION_PATHS

[Advanced] PARAMS_FOLDER_SECRET_DETECTION_ENTROPYVariable

Advanced upstream Infisical environment variable `PARAMS_FOLDER_SECRET_DETECTION_ENTROPY`.

Target: PARAMS_FOLDER_SECRET_DETECTION_ENTROPY

[Platform] INFISICAL_PRIMARY_INSTANCE_URLVariable

Advanced upstream Infisical environment variable `INFISICAL_PRIMARY_INSTANCE_URL`.

Target: INFISICAL_PRIMARY_INSTANCE_URL

[HSM] HSM_LIB_PATHVariable

Advanced upstream Infisical environment variable `HSM_LIB_PATH`.

Target: HSM_LIB_PATH

[HSM] HSM_PINVariable

Advanced upstream Infisical environment variable `HSM_PIN`.

Target: HSM_PIN

[HSM] HSM_KEY_LABELVariable

Advanced upstream Infisical environment variable `HSM_KEY_LABEL`.

Target: HSM_KEY_LABEL

[HSM] HSM_SLOTVariable

Advanced upstream Infisical environment variable `HSM_SLOT`.

Target: HSM_SLOT

[Advanced] USE_PG_QUEUEVariable

Advanced upstream Infisical environment variable `USE_PG_QUEUE`.

Target: USE_PG_QUEUE
Default: false|true
Value: false

[Advanced] SHOULD_INIT_PG_QUEUEVariable

Advanced upstream Infisical environment variable `SHOULD_INIT_PG_QUEUE`.

Target: SHOULD_INIT_PG_QUEUE
Default: false|true
Value: false

[Gateway/PAM] GATEWAY_INFISICAL_STATIC_IP_ADDRESSVariable

Advanced upstream Infisical environment variable `GATEWAY_INFISICAL_STATIC_IP_ADDRESS`.

Target: GATEWAY_INFISICAL_STATIC_IP_ADDRESS

[Gateway/PAM] GATEWAY_RELAY_ADDRESSVariable

Advanced upstream Infisical environment variable `GATEWAY_RELAY_ADDRESS`.

Target: GATEWAY_RELAY_ADDRESS

[Gateway/PAM] GATEWAY_RELAY_REALMVariable

Advanced upstream Infisical environment variable `GATEWAY_RELAY_REALM`.

Target: GATEWAY_RELAY_REALM

[Gateway/PAM] GATEWAY_RELAY_AUTH_SECRETVariable

Advanced upstream Infisical environment variable `GATEWAY_RELAY_AUTH_SECRET`.

Target: GATEWAY_RELAY_AUTH_SECRET

[Gateway/PAM] RELAY_AUTH_SECRETVariable

Advanced upstream Infisical environment variable `RELAY_AUTH_SECRET`.

Target: RELAY_AUTH_SECRET

[Advanced] DYNAMIC_SECRET_ALLOW_INTERNAL_IPVariable

Advanced upstream Infisical environment variable `DYNAMIC_SECRET_ALLOW_INTERNAL_IP`.

Target: DYNAMIC_SECRET_ALLOW_INTERNAL_IP
Default: false|true
Value: false

[Advanced] DYNAMIC_SECRET_AWS_ACCESS_KEY_IDVariable

Advanced upstream Infisical environment variable `DYNAMIC_SECRET_AWS_ACCESS_KEY_ID`.

Target: DYNAMIC_SECRET_AWS_ACCESS_KEY_ID

[Advanced] DYNAMIC_SECRET_AWS_SECRET_ACCESS_KEYVariable

Advanced upstream Infisical environment variable `DYNAMIC_SECRET_AWS_SECRET_ACCESS_KEY`.

Target: DYNAMIC_SECRET_AWS_SECRET_ACCESS_KEY

[Gateway/PAM] PAM_AWS_ACCESS_KEY_IDVariable

Advanced upstream Infisical environment variable `PAM_AWS_ACCESS_KEY_ID`.

Target: PAM_AWS_ACCESS_KEY_ID

[Gateway/PAM] PAM_AWS_SECRET_ACCESS_KEYVariable

Advanced upstream Infisical environment variable `PAM_AWS_SECRET_ACCESS_KEY`.

Target: PAM_AWS_SECRET_ACCESS_KEY

[Advanced] ALLOW_INTERNAL_IP_CONNECTIONSVariable

Advanced upstream Infisical environment variable `ALLOW_INTERNAL_IP_CONNECTIONS`.

Target: ALLOW_INTERNAL_IP_CONNECTIONS
Default: false|true
Value: false

[App Connections] INF_APP_CONNECTION_AWS_ACCESS_KEY_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_AWS_ACCESS_KEY_ID`.

Target: INF_APP_CONNECTION_AWS_ACCESS_KEY_ID

[App Connections] INF_APP_CONNECTION_AWS_SECRET_ACCESS_KEYVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_AWS_SECRET_ACCESS_KEY`.

Target: INF_APP_CONNECTION_AWS_SECRET_ACCESS_KEY

[App Connections] INF_APP_CONNECTION_GITHUB_OAUTH_CLIENT_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_OAUTH_CLIENT_ID`.

Target: INF_APP_CONNECTION_GITHUB_OAUTH_CLIENT_ID

[App Connections] INF_APP_CONNECTION_GITHUB_OAUTH_CLIENT_SECRETVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_OAUTH_CLIENT_SECRET`.

Target: INF_APP_CONNECTION_GITHUB_OAUTH_CLIENT_SECRET

[App Connections] INF_APP_CONNECTION_GITHUB_APP_CLIENT_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_APP_CLIENT_ID`.

Target: INF_APP_CONNECTION_GITHUB_APP_CLIENT_ID

[App Connections] INF_APP_CONNECTION_GITHUB_APP_CLIENT_SECRETVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_APP_CLIENT_SECRET`.

Target: INF_APP_CONNECTION_GITHUB_APP_CLIENT_SECRET

[App Connections] INF_APP_CONNECTION_GITHUB_APP_PRIVATE_KEYVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_APP_PRIVATE_KEY`.

Target: INF_APP_CONNECTION_GITHUB_APP_PRIVATE_KEY

[App Connections] INF_APP_CONNECTION_GITHUB_APP_SLUGVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_APP_SLUG`.

Target: INF_APP_CONNECTION_GITHUB_APP_SLUG

[App Connections] INF_APP_CONNECTION_GITHUB_APP_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_APP_ID`.

Target: INF_APP_CONNECTION_GITHUB_APP_ID

[App Connections] INF_APP_CONNECTION_GITHUB_APP_HOSTVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_APP_HOST`.

Target: INF_APP_CONNECTION_GITHUB_APP_HOST

[App Connections] INF_APP_CONNECTION_GITHUB_RADAR_APP_CLIENT_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_RADAR_APP_CLIENT_ID`.

Target: INF_APP_CONNECTION_GITHUB_RADAR_APP_CLIENT_ID

[App Connections] INF_APP_CONNECTION_GITHUB_RADAR_APP_CLIENT_SECRETVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_RADAR_APP_CLIENT_SECRET`.

Target: INF_APP_CONNECTION_GITHUB_RADAR_APP_CLIENT_SECRET

[App Connections] INF_APP_CONNECTION_GITHUB_RADAR_APP_PRIVATE_KEYVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_RADAR_APP_PRIVATE_KEY`.

Target: INF_APP_CONNECTION_GITHUB_RADAR_APP_PRIVATE_KEY

[App Connections] INF_APP_CONNECTION_GITHUB_RADAR_APP_SLUGVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_RADAR_APP_SLUG`.

Target: INF_APP_CONNECTION_GITHUB_RADAR_APP_SLUG

[App Connections] INF_APP_CONNECTION_GITHUB_RADAR_APP_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_RADAR_APP_ID`.

Target: INF_APP_CONNECTION_GITHUB_RADAR_APP_ID

[App Connections] INF_APP_CONNECTION_GITHUB_RADAR_APP_WEBHOOK_SECRETVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITHUB_RADAR_APP_WEBHOOK_SECRET`.

Target: INF_APP_CONNECTION_GITHUB_RADAR_APP_WEBHOOK_SECRET

[App Connections] INF_APP_CONNECTION_GITLAB_OAUTH_CLIENT_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITLAB_OAUTH_CLIENT_ID`.

Target: INF_APP_CONNECTION_GITLAB_OAUTH_CLIENT_ID

[App Connections] INF_APP_CONNECTION_GITLAB_OAUTH_CLIENT_SECRETVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GITLAB_OAUTH_CLIENT_SECRET`.

Target: INF_APP_CONNECTION_GITLAB_OAUTH_CLIENT_SECRET

[App Connections] INF_APP_CONNECTION_GCP_SERVICE_ACCOUNT_CREDENTIALVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_GCP_SERVICE_ACCOUNT_CREDENTIAL`.

Target: INF_APP_CONNECTION_GCP_SERVICE_ACCOUNT_CREDENTIAL

[App Connections] INF_APP_CONNECTION_AZURE_CLIENT_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_AZURE_CLIENT_ID`.

Target: INF_APP_CONNECTION_AZURE_CLIENT_ID

[App Connections] INF_APP_CONNECTION_AZURE_CLIENT_SECRETVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_AZURE_CLIENT_SECRET`.

Target: INF_APP_CONNECTION_AZURE_CLIENT_SECRET

[App Connections] INF_APP_CONNECTION_AZURE_APP_CONFIGURATION_CLIENT_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_AZURE_APP_CONFIGURATION_CLIENT_ID`.

Target: INF_APP_CONNECTION_AZURE_APP_CONFIGURATION_CLIENT_ID

[App Connections] INF_APP_CONNECTION_AZURE_APP_CONFIGURATION_CLIENT_SECRETVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_AZURE_APP_CONFIGURATION_CLIENT_SECRET`.

Target: INF_APP_CONNECTION_AZURE_APP_CONFIGURATION_CLIENT_SECRET

[App Connections] INF_APP_CONNECTION_AZURE_KEY_VAULT_CLIENT_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_AZURE_KEY_VAULT_CLIENT_ID`.

Target: INF_APP_CONNECTION_AZURE_KEY_VAULT_CLIENT_ID

[App Connections] INF_APP_CONNECTION_AZURE_KEY_VAULT_CLIENT_SECRETVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_AZURE_KEY_VAULT_CLIENT_SECRET`.

Target: INF_APP_CONNECTION_AZURE_KEY_VAULT_CLIENT_SECRET

[App Connections] INF_APP_CONNECTION_AZURE_CLIENT_SECRETS_CLIENT_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_AZURE_CLIENT_SECRETS_CLIENT_ID`.

Target: INF_APP_CONNECTION_AZURE_CLIENT_SECRETS_CLIENT_ID

[App Connections] INF_APP_CONNECTION_AZURE_CLIENT_SECRETS_CLIENT_SECRETVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_AZURE_CLIENT_SECRETS_CLIENT_SECRET`.

Target: INF_APP_CONNECTION_AZURE_CLIENT_SECRETS_CLIENT_SECRET

[App Connections] INF_APP_CONNECTION_AZURE_DEVOPS_CLIENT_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_AZURE_DEVOPS_CLIENT_ID`.

Target: INF_APP_CONNECTION_AZURE_DEVOPS_CLIENT_ID

[App Connections] INF_APP_CONNECTION_AZURE_DEVOPS_CLIENT_SECRETVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_AZURE_DEVOPS_CLIENT_SECRET`.

Target: INF_APP_CONNECTION_AZURE_DEVOPS_CLIENT_SECRET

[App Connections] INF_APP_CONNECTION_HEROKU_OAUTH_CLIENT_IDVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_HEROKU_OAUTH_CLIENT_ID`.

Target: INF_APP_CONNECTION_HEROKU_OAUTH_CLIENT_ID

[App Connections] INF_APP_CONNECTION_HEROKU_OAUTH_CLIENT_SECRETVariable

Advanced upstream Infisical environment variable `INF_APP_CONNECTION_HEROKU_OAUTH_CLIENT_SECRET`.

Target: INF_APP_CONNECTION_HEROKU_OAUTH_CLIENT_SECRET

[Advanced] SHOULD_USE_DATADOG_TRACERVariable

Advanced upstream Infisical environment variable `SHOULD_USE_DATADOG_TRACER`.

Target: SHOULD_USE_DATADOG_TRACER
Default: false|true
Value: false

[Telemetry] DATADOG_PROFILING_ENABLEDVariable

Advanced upstream Infisical environment variable `DATADOG_PROFILING_ENABLED`.

Target: DATADOG_PROFILING_ENABLED
Default: false|true
Value: false

[Telemetry] DATADOG_ENVVariable

Advanced upstream Infisical environment variable `DATADOG_ENV`.

Target: DATADOG_ENV

[Telemetry] DATADOG_SERVICEVariable

Advanced upstream Infisical environment variable `DATADOG_SERVICE`.

Target: DATADOG_SERVICE

[Telemetry] DATADOG_HOSTNAMEVariable

Advanced upstream Infisical environment variable `DATADOG_HOSTNAME`.

Target: DATADOG_HOSTNAME

[Advanced] PIT_CHECKPOINT_WINDOWVariable

Advanced upstream Infisical environment variable `PIT_CHECKPOINT_WINDOW`.

Target: PIT_CHECKPOINT_WINDOW

[Advanced] PIT_TREE_CHECKPOINT_WINDOWVariable

Advanced upstream Infisical environment variable `PIT_TREE_CHECKPOINT_WINDOW`.

Target: PIT_TREE_CHECKPOINT_WINDOW

[Network/Security] CORS_ALLOWED_ORIGINSVariable

Advanced upstream Infisical environment variable `CORS_ALLOWED_ORIGINS`.

Target: CORS_ALLOWED_ORIGINS

[Network/Security] CORS_ALLOWED_HEADERSVariable

Advanced upstream Infisical environment variable `CORS_ALLOWED_HEADERS`.

Target: CORS_ALLOWED_HEADERS

[Advanced] TRUSTED_PROXY_CIDRSVariable

Advanced upstream Infisical environment variable `TRUSTED_PROXY_CIDRS`.

Target: TRUSTED_PROXY_CIDRS

[Advanced] TNS_ADMINVariable

Advanced upstream Infisical environment variable `TNS_ADMIN`.

Target: TNS_ADMIN

[Advanced] GOLANG_SIDECAR_URLVariable

Advanced upstream Infisical environment variable `GOLANG_SIDECAR_URL`.

Target: GOLANG_SIDECAR_URL

[Advanced] GO_SIDECAR_SHADOW_ENABLEDVariable

Advanced upstream Infisical environment variable `GO_SIDECAR_SHADOW_ENABLED`.

Target: GO_SIDECAR_SHADOW_ENABLED

[Advanced] GO_SIDECAR_SHADOW_SAMPLE_RATEVariable

Advanced upstream Infisical environment variable `GO_SIDECAR_SHADOW_SAMPLE_RATE`.

Target: GO_SIDECAR_SHADOW_SAMPLE_RATE

[Advanced] GO_SIDECAR_BINARY_PATHVariable

Advanced upstream Infisical environment variable `GO_SIDECAR_BINARY_PATH`.

Target: GO_SIDECAR_BINARY_PATH

[Advanced] GO_SIDECAR_SPAWN_ENABLEDVariable

Advanced upstream Infisical environment variable `GO_SIDECAR_SPAWN_ENABLED`.

Target: GO_SIDECAR_SPAWN_ENABLED

[Advanced] INTERNAL_REGIONVariable

Advanced upstream Infisical environment variable `INTERNAL_REGION`.

Target: INTERNAL_REGION

Library

Curated

Categories

infisical-aio

Overview

Readme

infisical-aio

What This Image Includes

Beginner Install

Power User Surface

Runtime Notes

Publishing and Releases

Validation

Community Apps Sync

Support

Funding

Star History

Media gallery

Install infisical-aio on Unraid in a few clicks.

Requirements

Categories

Download Statistics

Related apps

Links

Details

Runtime arguments

Template configuration