The main web interface port.

Ziel

3000

Standard

3001

Wert

3001

Critical: Run 'openssl rand -hex 64' in your Unraid terminal and paste the randomized hash here.

Ziel

SECRET_KEY_BASE

Internal wrapper flag required for Sure self-hosted mode. Leave unchanged.

Ziel

SELF_HOSTED

Standard

true

Wert

true

Legacy upstream alias for self-hosted mode. Usually leave blank because SELF_HOSTED=true is already set by this wrapper.

Ziel

SELF_HOSTING_ENABLED

Alpha-only Sure import NDJSON upload limit in megabytes. Lower it if this test instance has constrained storage or memory.

Ziel

SURE_IMPORT_MAX_NDJSON_SIZE_MB

Standard

250

Wert

250

Alpha-only Sure import row limit used by web, API, and preflight paths.

Ziel

SURE_IMPORT_MAX_ROWS

Standard

1000000

Wert

1000000

Internal rails file storage.

Ziel

/rails/storage

Standard

/mnt/user/appdata/sure-aio-alpha/system

Wert

/mnt/user/appdata/sure-aio-alpha/system

Internal PostgreSQL database storage mapped externally so you don't lose data.

Ziel

/var/lib/postgresql/data

Standard

/mnt/user/appdata/sure-aio-alpha/postgres

Wert

/mnt/user/appdata/sure-aio-alpha/postgres

Internal Redis memory cache.

Ziel

/var/lib/redis

Standard

/mnt/user/appdata/sure-aio-alpha/redis

Wert

/mnt/user/appdata/sure-aio-alpha/redis

Optional host path to a PEM CA certificate file for trusting self-signed or internal HTTPS services. Leave blank unless you need private CA support.

Ziel

/certs/custom-ca.pem

The domain your Sure instance is hosted at (used for email links).

Ziel

APP_DOMAIN

Optional full external base URL including scheme, such as 'https://finance.example.com'. Useful for advanced SSO flows that need an absolute callback or issuer URL.

Ziel

APP_URL

Controls user registration. Use 'open', 'closed', or 'invite_only'.

Ziel

ONBOARDING_STATE

Standard

open

Wert

open

Optional global gate for account registration. Set to 'true' to require invite codes for sign-up.

Ziel

REQUIRE_INVITE_CODE

Set to 'false' if you explicitly want to skip email confirmation for new accounts. Leave enabled for the safer default.

Ziel

REQUIRE_EMAIL_CONFIRMATION

Standard

true

Wert

true

Leave 'false' for direct LAN access. Set to 'true' only when Sure sits behind a SSL-terminating reverse proxy.

Ziel

RAILS_ASSUME_SSL

Standard

false

Wert

false

Leave 'false' for the default Unraid install over plain HTTP. Set to 'true' only if you want direct HTTP requests redirected to HTTPS.

Ziel

RAILS_FORCE_SSL

Standard

false

Wert

false

Optional in-container path to a PEM CA certificate file. If you use the provided mount above, set this to '/certs/custom-ca.pem'.

Ziel

SSL_CA_FILE

Optional full CA bundle path for advanced Ruby/OpenSSL trust overrides. Usually leave blank and use SSL_CA_FILE instead.

Ziel

SSL_CERT_FILE

Leave 'true' for production. Set to 'false' only for temporary testing against broken or self-signed HTTPS endpoints.

Ziel

SSL_VERIFY

Standard

true

Wert

true

Set to 'true' to log detailed outbound SSL trust and certificate diagnostics.

Ziel

SSL_DEBUG

Standard

false

Wert

false

Optional external privacy-policy URL shown by the app when provided.

Ziel

LEGAL_PRIVACY_URL

Optional external terms-of-service URL shown by the app when provided.

Ziel

LEGAL_TERMS_URL

Optional external PostgreSQL host or container name. Example: '192.168.1.50' or 'postgres-shared' on a custom Docker network.

Ziel

DB_HOST

Optional external PostgreSQL port. Example: '5432'.

Ziel

DB_PORT

Optional external PostgreSQL database name. Leave blank to keep Sure's normal default database name.

Ziel

POSTGRES_DB

Optional external PostgreSQL username. This user must already exist on your external database.

Ziel

POSTGRES_USER

Optional password for the external PostgreSQL user above.

Ziel

POSTGRES_PASSWORD

Optional external Redis URL. Example: 'redis://192.168.1.50:6379/1' or 'redis://:password@redis-host:6379/1'.

Ziel

REDIS_URL

Optional Redis Sentinel hosts, comma-separated like 'host1:26379,host2:26379'. Takes precedence over REDIS_URL when set.

Ziel

REDIS_SENTINEL_HOSTS

Redis Sentinel master name.

Ziel

REDIS_SENTINEL_MASTER

Standard

mymaster

Wert

mymaster

Redis Sentinel username if your Sentinel deployment requires authentication.

Ziel

REDIS_SENTINEL_USERNAME

Standard

default

Wert

default

Redis password used for Sentinel-backed Redis deployments.

Ziel

REDIS_PASSWORD

Custom product name in UI.

Ziel

PRODUCT_NAME

Custom brand name in UI.

Ziel

BRAND_NAME

Choose the initial layout for new sessions. Use 'dashboard' for the standard app or 'intro' for the intro-first experience.

Ziel

DEFAULT_UI_LAYOUT

Standard

dashboard

Wert

dashboard

Optional explicit Rails encryption primary key. Leave blank unless you deliberately manage separate Active Record encryption keys outside SECRET_KEY_BASE.

Ziel

ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY

Optional deterministic encryption key paired with the primary key above. Leave blank unless you already know your Rails encryption key material.

Ziel

ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY

Optional key-derivation salt for Rails encryption. Leave blank unless you manage custom encryption keys yourself.

Ziel

ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT

OpenAI-compatible API key. Get OpenAI keys from platform.openai.com/api-keys. If using local Ollama, enter any non-empty placeholder such as 'ollama-local'.

Ziel

OPENAI_ACCESS_TOKEN

Leave blank for official OpenAI. For local LLMs, enter your endpoint (e.g., 'http://ollama:11434/v1').

Ziel

OPENAI_URI_BASE

If using Ollama, you MUST define the model here (e.g., 'llama3.1:13b' or 'gemma2:7b').

Ziel

OPENAI_MODEL

Optional provider override used only for transaction categorization. Example: 'openai' or 'ollama'. If blank, Sure uses its normal AI provider behavior.

Ziel

CATEGORIZATION_PROVIDER

Optional model override used only for categorization, such as 'gemma2:7b'.

Ziel

CATEGORIZATION_MODEL

Optional provider override used only for chat-assistant requests. Example: 'openai' or 'ollama'.

Ziel

CHAT_PROVIDER

Optional model override used only for chat-assistant requests, such as 'gpt-4.1' or a local Ollama model.

Ziel

CHAT_MODEL

OpenAI-compatible request timeout in seconds. Raise this only if your provider or local LLM is slow to respond.

Ziel

OPENAI_REQUEST_TIMEOUT

Standard

60

Wert

60

Optional structured-output override. Valid values are '', 'strict', 'none', or 'json_object'. Set this only if you need to force Sure's OpenAI JSON behavior globally.

Ziel

LLM_JSON_MODE

Set to 'true' to enable verbose AI chat debugging in logs.

Ziel

AI_DEBUG_MODE

Standard

false

Wert

false

Leave 'true' for OpenAI or vision-capable providers. Set to 'false' only for OpenAI-compatible endpoints that do not support PDF or vision input.

Ziel

OPENAI_SUPPORTS_PDF_PROCESSING

Standard

true

Wert

true

Optional override for OpenAI-compatible endpoints. Use 'true' to force the Responses API or 'false' to force chat completions. Leave blank for upstream auto-detection.

Ziel

OPENAI_SUPPORTS_RESPONSES_ENDPOINT

Optional total LLM context window in tokens. Lower this for small local models or raise it for larger cloud models.

Ziel

LLM_CONTEXT_WINDOW

Optional tokens reserved for each model response. Leave blank for upstream defaults.

Ziel

LLM_MAX_RESPONSE_TOKENS

Optional explicit chat history token budget. Leave blank so Sure derives it from context, response, and system-prompt reserves.

Ziel

LLM_MAX_HISTORY_TOKENS

Optional tokens reserved for Sure's system prompt and instructions. Leave blank for upstream defaults.

Ziel

LLM_SYSTEM_PROMPT_RESERVE

Optional maximum batch size for AI categorization and merchant-detection calls. Lower this for small local models.

Ziel

LLM_MAX_ITEMS_PER_CALL

Optional document-search backend. Leave blank for the default path. Set to 'pgvector' to use PostgreSQL-based vectors or 'qdrant' for an external Qdrant server.

Ziel

VECTOR_STORE_PROVIDER

Embedding model name used for document search. Example: 'nomic-embed-text'. This is required when you enable pgvector or qdrant-backed document search.

Ziel

EMBEDDING_MODEL

Embedding width for the selected model. Must match the provider output.

Ziel

EMBEDDING_DIMENSIONS

Standard

1024

Wert

1024

Optional dedicated embeddings endpoint. Example: 'http://ollama:11434/v1'. If blank, Sure falls back to OPENAI_URI_BASE.

Ziel

EMBEDDING_URI_BASE

Optional dedicated embeddings token. If blank, Sure falls back to OPENAI_ACCESS_TOKEN.

Ziel

EMBEDDING_ACCESS_TOKEN

Optional external Qdrant endpoint for vector storage. Example: 'http://192.168.1.50:6333'.

Ziel

QDRANT_URL

Optional Qdrant API key from your Qdrant Cloud or self-hosted auth configuration.

Ziel

QDRANT_API_KEY

Set to 'external' to route all chat to an external agent via MCP.

Ziel

ASSISTANT_TYPE

URL for the external agent (e.g. https://your-openclaw/v1/chat/completions).

Ziel

EXTERNAL_ASSISTANT_URL

Auth token expected by your external agent or gateway. Copy it from that service's dashboard or config.

Ziel

EXTERNAL_ASSISTANT_TOKEN

Optional Agent ID for OpenClaw routing.

Ziel

EXTERNAL_ASSISTANT_AGENT_ID

Optional shared session key for remote agent conversation persistence. Leave blank so Sure-AIO derives isolated per-chat remote state.

Ziel

EXTERNAL_ASSISTANT_SESSION_KEY

Optional comma-separated allowlist of users permitted to use the external assistant.

Ziel

EXTERNAL_ASSISTANT_ALLOWED_EMAILS

Required if using Ext. AI: Email of an existing Sure user.

Ziel

MCP_USER_EMAIL

Required if using Ext. AI: Bearer token for agent callbacks to /mcp. Generate one with 'openssl rand -hex 32' in the Unraid terminal.

Ziel

MCP_API_TOKEN

PostHog project API key from your PostHog project settings.

Ziel

POSTHOG_KEY

PostHog host URL. Example: 'https://us.i.posthog.com' or your self-hosted PostHog URL.

Ziel

POSTHOG_HOST

Langfuse base URL for LLM observability. Example: 'https://cloud.langfuse.com' or your self-hosted Langfuse URL.

Ziel

LANGFUSE_HOST

Optional Langfuse region shortcut like 'us' or 'eu'. Use this only if you are not setting a custom Langfuse Host URL.

Ziel

LANGFUSE_REGION

Langfuse public key from your project settings.

Ziel

LANGFUSE_PUBLIC_KEY

Langfuse secret key from your project settings.

Ziel

LANGFUSE_SECRET_KEY

Optional Sentry DSN if you want upstream exception reporting enabled for this instance.

Ziel

SENTRY_DSN

Set to 'true' only if you intentionally use Skylight's hosted APM service. Default is 'false' for AIO installs so no external Skylight setup is required.

Ziel

SKYLIGHT_ENABLED

Standard

false

Wert

false

Optional Skylight app authentication token. Only used when SKYLIGHT_ENABLED is true and you want to send APM data to your Skylight account.

Ziel

SKYLIGHT_AUTHENTICATION

Optional Better Stack / Logtail source token from your log source settings.

Ziel

LOGTAIL_API_KEY

Optional Logtail ingest host used with LOGTAIL_API_KEY.

Ziel

LOGTAIL_INGESTING_HOST

Application log verbosity. Use 'info' for normal operation or 'debug' for deeper troubleshooting.

Ziel

RAILS_LOG_LEVEL

Standard

info

Wert

info

Optional worker thread count used by Puma, Sidekiq, and DB pool sizing. Leave blank for upstream default (3).

Ziel

RAILS_MAX_THREADS

Optional Puma process count for the web service. Leave blank for upstream default (1).

Ziel

WEB_CONCURRENCY

Optional username for /sidekiq dashboard basic auth. Leave blank to keep upstream default username ('sure').

Ziel

SIDEKIQ_WEB_USERNAME

Optional password for /sidekiq dashboard basic auth. Leave blank to keep upstream default password ('sure').

Ziel

SIDEKIQ_WEB_PASSWORD

Optional outbound HTTPS proxy URL (for advanced egress controls like Pipelock). Leave blank for normal direct outbound traffic.

Ziel

HTTPS_PROXY

Optional outbound HTTP proxy URL. Leave blank unless your network requires a proxy.

Ziel

HTTP_PROXY

Optional comma-separated hosts/domains that should bypass HTTP(S) proxy routing.

Ziel

NO_PROXY

Optional exchange-rate provider override. If left blank, Sure uses its normal default and UI selection behavior.

Ziel

EXCHANGE_RATE_PROVIDER

Optional securities provider override. If left blank, Sure uses its normal default and UI selection behavior.

Ziel

SECURITIES_PROVIDER

Optional comma-separated securities provider list. Example: 'yahoo_finance,binance_public,twelve_data'. Takes precedence over the single Securities Provider field when set.

Ziel

SECURITIES_PROVIDERS

Brandfetch client ID from your Brandfetch application or dashboard if you want merchant and bank logos.

Ziel

BRAND_FETCH_CLIENT_ID

Optional env override for 120x120 Brandfetch logos. Set to 'true' to force high-res logos, 'false' to force standard size. Leave blank to keep the in-app toggle enabled.

Ziel

BRAND_FETCH_HIGH_RES_LOGOS

Optional global API token used by the Indexa Capital provider when account-level credentials are not configured.

Ziel

INDEXA_API_TOKEN

Optional Twelve Data API key from twelvedata.com if you want exchange rates or securities from Twelve Data instead of Yahoo Finance.

Ziel

TWELVE_DATA_API_KEY

Optional custom Twelve Data API base URL. Leave blank unless you are routing Twelve Data through a proxy or alternate endpoint.

Ziel

TWELVE_DATA_URL

Optional minimum spacing between Twelve Data requests in seconds. Leave blank for upstream pacing.

Ziel

TWELVE_DATA_MIN_REQUEST_INTERVAL

Optional Twelve Data per-minute credit limit. Lower this if your plan is more restrictive than upstream defaults.

Ziel

TWELVE_DATA_MAX_REQUESTS_PER_MINUTE

Optional Tiingo API key for securities pricing. Configure provider selection separately if you want Sure to use Tiingo.

Ziel

TIINGO_API_KEY

Optional custom Tiingo API base URL. Leave blank for normal public Tiingo access.

Ziel

TIINGO_URL

Optional Tiingo hourly request cap used by Sure's rate limiter. Leave blank for upstream defaults.

Ziel

TIINGO_MAX_REQUESTS_PER_HOUR

Optional EODHD API key for securities pricing, especially international ETF coverage. Configure provider selection separately if you want Sure to use EODHD.

Ziel

EODHD_API_KEY

Optional custom EODHD API base URL. Leave blank for normal public EODHD access.

Ziel

EODHD_URL

Optional EODHD daily request cap used by Sure's rate limiter. Leave blank for upstream defaults.

Ziel

EODHD_MAX_REQUESTS_PER_DAY

Optional Alpha Vantage API key for securities pricing. Configure provider selection separately if you want Sure to use Alpha Vantage.

Ziel

ALPHA_VANTAGE_API_KEY

Optional custom Alpha Vantage API base URL. Leave blank for normal public Alpha Vantage access.

Ziel

ALPHA_VANTAGE_URL

Optional Alpha Vantage daily request cap used by Sure's rate limiter. Leave blank for upstream defaults.

Ziel

ALPHA_VANTAGE_MAX_REQUESTS_PER_DAY

Optional custom MFAPI base URL for mutual-fund data. Leave blank for upstream defaults.

Ziel

MFAPI_URL

Optional custom Binance public market-data base URL. Leave blank for upstream defaults.

Ziel

BINANCE_PUBLIC_URL

Optional public egress IP shown in the Binance setup UI so users know which IP to allowlist.

Ziel

BINANCE_EGRESS_IP

Optional custom Yahoo Finance API base URL. Leave blank for normal public Yahoo Finance access.

Ziel

YAHOO_FINANCE_URL

Maximum retry attempts for Yahoo Finance requests before Sure gives up.

Ziel

YAHOO_FINANCE_MAX_RETRIES

Standard

5

Wert

5

Seconds to wait between Yahoo Finance retry attempts.

Ziel

YAHOO_FINANCE_RETRY_INTERVAL

Standard

1.0

Wert

1.0

Optional minimum spacing between Yahoo Finance requests in seconds. Leave blank to keep upstream defaults.

Ziel

YAHOO_FINANCE_MIN_REQUEST_INTERVAL

Container-level override for Sure's scheduled sync job. Use '1' to keep it enabled or '0' to disable automatic syncs globally.

Ziel

AUTO_SYNC_ENABLED

Standard

1

Wert

1

Daily auto-sync time in 24-hour HH:MM format.

Ziel

AUTO_SYNC_TIME

Standard

02:22

Wert

02:22

Timezone used with AUTO_SYNC_TIME. Example: 'America/Denver'.

Ziel

AUTO_SYNC_TIMEZONE

Standard

UTC

Wert

UTC

Set to '0' to exclude pending SimpleFIN transactions. If set here, upstream disables the corresponding Sync setting in the Sure UI.

Ziel

SIMPLEFIN_INCLUDE_PENDING

Standard

1

Wert

1

Set to 'true' to log raw SimpleFIN payloads for debugging. This can expose sensitive data and create noisy logs.

Ziel

SIMPLEFIN_DEBUG_RAW

Optional override for SimpleFIN liability overpayment detection. Set to 'false' to disable the heuristic globally.

Ziel

SIMPLEFIN_CC_OVERPAYMENT_HEURISTIC

Set to '0' to exclude pending Plaid transactions. If set here, upstream disables the corresponding Sync setting in the Sure UI.

Ziel

PLAID_INCLUDE_PENDING

Standard

1

Wert

1

Set to 'true' to include pending transactions in Lunchflow sync requests.

Ziel

LUNCHFLOW_INCLUDE_PENDING

Set to 'true' to log raw Lunchflow payloads for debugging. This can expose sensitive data and create noisy logs.

Ziel

LUNCHFLOW_DEBUG_RAW

Set to 'false' to disable local email/password login and move users toward SSO-only auth.

Ziel

AUTH_LOCAL_LOGIN_ENABLED

Standard

true

Wert

true

If local login is disabled, set to 'true' to let super admins keep local login as an emergency backdoor.

Ziel

AUTH_LOCAL_ADMIN_OVERRIDE_ENABLED

Standard

false

Wert

false

SSO behavior for first-time users: 'create_and_link' creates accounts automatically, 'link_only' requires an existing user.

Ziel

AUTH_JIT_MODE

Standard

create_and_link

Wert

create_and_link

Optional comma-separated email domains allowed for JIT SSO account creation.

Ziel

ALLOWED_OIDC_DOMAINS

Alpha-only passkey/WebAuthn relying party ID. Usually your registrable domain, such as 'example.com'. This only configures browser trust; add passkeys inside Sure from Settings > Security after enabling authenticator-app 2FA. Changing this after registering credentials can make existing passkeys unusable.

Ziel

WEBAUTHN_RP_ID

Alpha-only comma-separated WebAuthn origins including scheme and host, such as 'https://finance.example.com'. This only configures browser trust; add passkeys inside Sure from Settings > Security after enabling authenticator-app 2FA.

Ziel

WEBAUTHN_ALLOWED_ORIGINS

Leave blank for normal YAML/env-backed provider loading. Set to 'db' if you want upstream's database-backed SSO provider admin UI.

Ziel

AUTH_PROVIDERS_SOURCE

OIDC client ID from your identity provider app registration, such as Authentik, Authelia, Keycloak, or Zitadel.

Ziel

OIDC_CLIENT_ID

OIDC client secret from the same identity provider app registration.

Ziel

OIDC_CLIENT_SECRET

OIDC issuer URL. Example: 'https://auth.example.com/application/o/sure/' or your provider's issuer endpoint.

Ziel

OIDC_ISSUER

OIDC redirect URI registered with your provider. Example: 'https://finance.example.com/auth/openid_connect/callback'.

Ziel

OIDC_REDIRECT_URI

Optional custom sign-in button label for the default OIDC provider.

Ziel

OIDC_BUTTON_LABEL

Optional icon slug for the default OIDC sign-in button.

Ziel

OIDC_BUTTON_ICON

Standard

key

Wert

key

Optional Google OAuth client ID from console.cloud.google.com if you want a dedicated Google sign-in provider.

Ziel

GOOGLE_OAUTH_CLIENT_ID

Optional Google OAuth client secret from the same Google OAuth app.

Ziel

GOOGLE_OAUTH_CLIENT_SECRET

Optional custom label for the Google sign-in button.

Ziel

GOOGLE_BUTTON_LABEL

Standard

Sign in with Google

Wert

Sign in with Google

Optional icon slug for the Google sign-in button.

Ziel

GOOGLE_BUTTON_ICON

Standard

google

Wert

google

Optional GitHub OAuth client ID from your GitHub OAuth App settings if you want a dedicated GitHub sign-in provider.

Ziel

GITHUB_CLIENT_ID

Optional GitHub OAuth client secret from the same GitHub OAuth App.

Ziel

GITHUB_CLIENT_SECRET

Optional custom label for the GitHub sign-in button.

Ziel

GITHUB_BUTTON_LABEL

Standard

Sign in with GitHub

Wert

Sign in with GitHub

Optional icon slug for the GitHub sign-in button.

Ziel

GITHUB_BUTTON_ICON

Standard

github

Wert

github

Optional named Keycloak OIDC provider client ID for upstream multi-provider auth.yml mode.

Ziel

OIDC_KEYCLOAK_CLIENT_ID

Optional named Keycloak OIDC provider client secret for upstream multi-provider auth.yml mode.

Ziel

OIDC_KEYCLOAK_CLIENT_SECRET

Optional named Keycloak OIDC issuer URL for upstream multi-provider auth.yml mode.

Ziel

OIDC_KEYCLOAK_ISSUER

Optional named Keycloak OIDC redirect URI for upstream multi-provider auth.yml mode.

Ziel

OIDC_KEYCLOAK_REDIRECT_URI

Optional named Authentik OIDC provider client ID for upstream multi-provider auth.yml mode.

Ziel

OIDC_AUTHENTIK_CLIENT_ID

Optional named Authentik OIDC provider client secret for upstream multi-provider auth.yml mode.

Ziel

OIDC_AUTHENTIK_CLIENT_SECRET

Optional named Authentik OIDC issuer URL for upstream multi-provider auth.yml mode.

Ziel

OIDC_AUTHENTIK_ISSUER

Optional named Authentik OIDC redirect URI for upstream multi-provider auth.yml mode.

Ziel

OIDC_AUTHENTIK_REDIRECT_URI

Leave blank for internal disk storage. Change to 'amazon', 'cloudflare', 'generic_s3', or 'google' to move uploads out of the container.

Ziel

ACTIVE_STORAGE_SERVICE

Amazon S3 access key ID from your AWS IAM user or access-key pair.

Ziel

S3_ACCESS_KEY_ID

Amazon S3 secret access key paired with the access key ID above.

Ziel

S3_SECRET_ACCESS_KEY

Amazon S3 region. Defaults to us-east-1 if left blank.

Ziel

S3_REGION

Amazon S3 bucket name.

Ziel

S3_BUCKET

Cloudflare account ID used to construct the R2 endpoint URL.

Ziel

CLOUDFLARE_ACCOUNT_ID

Cloudflare R2 access key ID from your R2 API token pair.

Ziel

CLOUDFLARE_ACCESS_KEY_ID

Cloudflare R2 secret access key paired with the R2 access key ID above.

Ziel

CLOUDFLARE_SECRET_ACCESS_KEY

Cloudflare R2 bucket name.

Ziel

CLOUDFLARE_BUCKET

Generic S3 or MinIO access key ID from your object-storage service.

Ziel

GENERIC_S3_ACCESS_KEY_ID

Generic S3 or MinIO secret access key paired with the access key ID above.

Ziel

GENERIC_S3_SECRET_ACCESS_KEY

Generic S3 region value expected by your provider.

Ziel

GENERIC_S3_REGION

Generic S3 or MinIO bucket name.

Ziel

GENERIC_S3_BUCKET

Custom MinIO or S3-compatible endpoint URL.

Ziel

GENERIC_S3_ENDPOINT

Set to 'true' for providers that require path-style S3 requests.

Ziel

GENERIC_S3_FORCE_PATH_STYLE

Standard

false

Wert

false

Google Cloud project ID used by Active Storage when Provider Strategy is set to 'google'.

Ziel

GCS_PROJECT

Google Cloud Storage bucket name used when Provider Strategy is set to 'google'.

Ziel

GCS_BUCKET

Raw Google service-account JSON content. Preferred over a keyfile path when using GCS storage.

Ziel

GCS_KEYFILE_JSON

In-container path to a Google service-account JSON keyfile. Use only if you mount the file separately.

Ziel

GCS_KEYFILE

Hostname for your SMTP server. Example: 'smtp.mailgun.org', 'smtp.sendgrid.net', or your mail relay host.

Ziel

SMTP_ADDRESS

Port for your SMTP server. Common values: '465' for implicit TLS or '587' for STARTTLS.

Ziel

SMTP_PORT

Standard

465

SMTP username from your mail provider or relay.

Ziel

SMTP_USERNAME

SMTP password or app password from your mail provider.

Ziel

SMTP_PASSWORD

Leave 'true' for normal secure SMTP. Set to 'false' only if your mail relay expects plain SMTP without TLS.

Ziel

SMTP_TLS_ENABLED

Standard

true

Wert

true

Leave 'false' for normal certificate validation. Set to 'true' only for a trusted private SMTP relay with broken TLS certificates.

Ziel

SMTP_TLS_SKIP_VERIFY

Standard

false

Wert

false

The email address your app will send mail from (e.g., finance@mydomain.com).

Ziel

EMAIL_SENDER

Optional Plaid client ID if you want upstream Plaid account linking enabled.

Ziel

PLAID_CLIENT_ID

Optional Plaid secret paired with the client ID above.

Ziel

PLAID_SECRET

Optional Plaid environment such as 'sandbox' or 'production'.

Ziel

PLAID_ENV

Optional Plaid Europe client ID if you use the Plaid EU adapter.

Ziel

PLAID_EU_CLIENT_ID

Optional Plaid Europe secret paired with the Plaid EU client ID above.

Ziel

PLAID_EU_SECRET

Optional Plaid Europe environment such as 'sandbox' or 'production'.

Ziel

PLAID_EU_ENV