Public-facing GoTrue URL. Set to http://YOUR_SERVER_IP/gotrue (or your domain with /gotrue). Must be reachable by clients for OAuth redirects.

Ziel

API_EXTERNAL_URL

Standard

http://YOUR_SERVER_IP/gotrue

Wert

http://YOUR_SERVER_IP/gotrue

Email address of the initial admin account created on first start.

Ziel

GOTRUE_ADMIN_EMAIL

Standard

admin@example.com

Wert

admin@example.com

Password for the initial admin account.

Ziel

GOTRUE_ADMIN_PASSWORD

Standard

changeme_admin_password

Wert

changeme_admin_password

Shared JWT signing secret. MUST be identical to APPFLOWY_GOTRUE_JWT_SECRET in AppFlowy-Cloud. Minimum 32 characters. Keep private.

Ziel

GOTRUE_JWT_SECRET

Standard

changeme_jwt_secret_min32chars!!

Wert

changeme_jwt_secret_min32chars!!

GoTrue PostgreSQL connection string. Update user, password, and host if you changed them. Uses the auth schema.

Ziel

DATABASE_URL

Standard

postgres://postgres:changeme_strong_password@AppFlowy-Postgres:5432/postgres?search_path=auth

Wert

postgres://postgres:changeme_strong_password@AppFlowy-Postgres:5432/postgres?search_path=auth

JWT token lifetime in seconds. Default: 604800 (7 days).

Ziel

GOTRUE_JWT_EXP

Standard

604800

Wert

604800

Set true to skip email confirmation (recommended for initial setup). Set false to require email confirmation — you must also configure SMTP.

Ziel

GOTRUE_MAILER_AUTOCONFIRM

Standard

true

Wert

true

Set true to allow only invited users to sign up.

Ziel

GOTRUE_DISABLE_SIGNUP

Standard

false

Wert

false

Maximum emails GoTrue can send per minute.

Ziel

GOTRUE_RATE_LIMIT_EMAIL_SENT

Standard

100

Wert

100

Database driver — always postgres.

Ziel

GOTRUE_DB_DRIVER

Standard

postgres

Wert

postgres

Deep-link scheme for the AppFlowy native app.

Ziel

GOTRUE_SITE_URL

Standard

appflowy-flutter://

Wert

appflowy-flutter://

Allowed OAuth redirect URIs. ** permits all; restrict for production.

Ziel

GOTRUE_URI_ALLOW_LIST

Standard

**

Wert

**

JWT group name for admin users.

Ziel

GOTRUE_JWT_ADMIN_GROUP_NAME

Standard

supabase_admin

Wert

supabase_admin

GoTrue internal listen port. Do not change.

Ziel

PORT

Standard

9999

Wert

9999

URL path for email confirmation links.

Ziel

GOTRUE_MAILER_URLPATHS_CONFIRMATION

Standard

/gotrue/verify

Wert

/gotrue/verify

URL path for invite links.

Ziel

GOTRUE_MAILER_URLPATHS_INVITE

Standard

/gotrue/verify

Wert

/gotrue/verify

URL path for password recovery links.

Ziel

GOTRUE_MAILER_URLPATHS_RECOVERY

Standard

/gotrue/verify

Wert

/gotrue/verify

URL path for email-change confirmation links.

Ziel

GOTRUE_MAILER_URLPATHS_EMAIL_CHANGE

Standard

/gotrue/verify

Wert

/gotrue/verify

SMTP server hostname (e.g. smtp.gmail.com). Required if GOTRUE_MAILER_AUTOCONFIRM=false.

Ziel

GOTRUE_SMTP_HOST

SMTP port. Use 465 for TLS/SMTPS, 587 for STARTTLS.

Ziel

GOTRUE_SMTP_PORT

Standard

465

Wert

465

SMTP sender email address.

Ziel

GOTRUE_SMTP_USER

SMTP password.

Ziel

GOTRUE_SMTP_PASS

Admin email used as the From address.

Ziel

GOTRUE_SMTP_ADMIN_EMAIL

Minimum interval between emails to the same address. Use 1ns for no limit.

Ziel

GOTRUE_SMTP_MAX_FREQUENCY

Standard

1ns

Wert

1ns

Optional: public URL to a custom magic-link email HTML template.

Ziel

GOTRUE_MAILER_TEMPLATES_MAGIC_LINK

Enable Google OAuth login.

Ziel

GOTRUE_EXTERNAL_GOOGLE_ENABLED

Standard

false

Wert

false

Google OAuth client ID.

Ziel

GOTRUE_EXTERNAL_GOOGLE_CLIENT_ID

Google OAuth client secret.

Ziel

GOTRUE_EXTERNAL_GOOGLE_SECRET

Google OAuth redirect URI.

Ziel

GOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI

Standard

http://YOUR_SERVER_IP/gotrue/callback

Wert

http://YOUR_SERVER_IP/gotrue/callback

Enable GitHub OAuth login.

Ziel

GOTRUE_EXTERNAL_GITHUB_ENABLED

Standard

false

Wert

false

GitHub OAuth app client ID.

Ziel

GOTRUE_EXTERNAL_GITHUB_CLIENT_ID

GitHub OAuth app client secret.

Ziel

GOTRUE_EXTERNAL_GITHUB_SECRET

GitHub OAuth redirect URI.

Ziel

GOTRUE_EXTERNAL_GITHUB_REDIRECT_URI

Standard

http://YOUR_SERVER_IP/gotrue/callback

Wert

http://YOUR_SERVER_IP/gotrue/callback

Enable Discord OAuth login.

Ziel

GOTRUE_EXTERNAL_DISCORD_ENABLED

Standard

false

Wert

false

Discord OAuth application client ID.

Ziel

GOTRUE_EXTERNAL_DISCORD_CLIENT_ID

Discord OAuth application client secret.

Ziel

GOTRUE_EXTERNAL_DISCORD_SECRET

Discord OAuth redirect URI.

Ziel

GOTRUE_EXTERNAL_DISCORD_REDIRECT_URI

Standard

http://YOUR_SERVER_IP/gotrue/callback

Wert

http://YOUR_SERVER_IP/gotrue/callback

Enable SAML 2.0 single sign-on.

Ziel

GOTRUE_SAML_ENABLED

Standard

false

Wert

false

PEM-encoded private key for SAML 2.0 signing.

Ziel

GOTRUE_SAML_PRIVATE_KEY